# AI Governance Essentials for Staff

## The rules every employee should know

1. Use only approved AI tools for work.
2. Do not enter restricted or sensitive data unless explicitly allowed.
3. Treat AI output as draft material that may be wrong.
4. Review before sending, publishing, recording, or relying on output.
5. Escalate uncertainty or incidents immediately.

## What counts as restricted data

Examples may include:

- customer personal information
- employee records
- financial details
- credentials or secrets
- privileged legal material
- contract-sensitive documents
- regulated data categories

## What review means

Review means checking facts, checking context, checking policy alignment, and checking whether the output is appropriate for the audience and use case.