Most schools are in one of three places on AI: banned it, allowed it without guardrails, or haven't decided. All three have real costs. Here's how to make a thoughtful decision — and communicate it clearly.
Most schools are currently in one of three places on AI: they've banned it outright, they've allowed it without guardrails, or — most commonly — they haven't made a decision at all, which means each teacher is making their own call.
All three of these situations have real costs. A blanket ban is unenforceable and sends students into the workforce without exposure to tools they'll be expected to use. Unrestricted use creates real risks around privacy, academic integrity, and student development. And the absence of a policy is the most common situation — outcomes are entirely inconsistent across classrooms and grade levels.
This article is for the leaders who know a decision needs to be made and want to make a thoughtful one.
Before writing a policy, it helps to recognize that "AI in school" is actually three different questions, each requiring its own answer:
Decision 3 — What data can go in? This is the question that matters most from a privacy and compliance standpoint and gets discussed the least. Student names, IEP information, behavioral records, and assessment data should never be entered into a public AI tool. Your policy needs to address this specifically.
This isn't a permanent answer — but it's a workable starting point for most schools:
Consumer AI tools — including many free and popular ones — use the text entered into them to train future versions of the model. If a teacher enters a student's name, learning profile, behavioral data, or assessment results into a consumer AI tool, that data is no longer under the school's control. FERPA protections apply to how schools share records — but they don't prevent a teacher from unknowingly exposing that data through an unmanaged AI tool.
What to do: Establish a clear rule — no student-identifying information goes into any AI tool that hasn't been reviewed and approved by your IT team or IT partner. Train staff on this specifically. Most educators using AI responsibly simply haven't thought about this dimension.
Parents want to know: What is my child being asked to do with AI, and is my child's information safe? Lead with the learning rationale for any AI use, and state clearly what data protections are in place. Avoid defensive framing that makes AI sound alarming, or vague assurances that "we're following best practices." Neither builds trust.
Explain the difference between "AI as a thinking partner" and "AI as a shortcut that skips learning" — explicitly, and repeatedly. Building AI literacy is itself a learning objective worth naming. Don't assume students understand the difference; teach it.
If the policy prohibits student data entry into AI tools, explain the data privacy reason. If it allows AI for drafting but not final submissions, explain the pedagogical reasoning. Policies that are understood are followed. Policies handed down without explanation are worked around.
The policy you write today will not be adequate in two years. The technology is moving faster than policy cycles, and that's okay. Build in a review schedule — annually at minimum. Assign a person or committee responsible for the update.
Create a feedback mechanism for staff and students. The people using AI every day will surface issues that leadership doesn't see from the top. Connect your AI policy to your broader technology policy and acceptable-use framework — they should read as a coherent set, not as separate, conflicting documents.
The goal right now is not to write the perfect AI policy. The goal is to make a visible, documented decision that gives staff and students something clear to work with — and to build in the humility to revisit it.
The schools doing this well are not the ones with the most sophisticated technology. They're the ones where leadership made a decision, communicated it clearly, and stayed in conversation with the people implementing it.
You can do that. You don't need to wait until you have all the answers.
AshTechWisdom provides practical AI governance frameworks, policy templates, and professional development for schools, nonprofits, and small businesses.
RELATED ARTICLES