Generative Artificial Intelligence Policy - March 2026

1. Introduction to Artificial Intelligence (AI) and Generative AI

1.1.     Artificial Intelligence (AI) refers to the use of computer systems to perform tasks that typically require human intelligence, such as understanding language, recognising patterns, or making decisions. A specific type of AI, known as Generative AI (GenAI), is designed to create new content such as text, images, audio, or code, based on patterns it has learned from large datasets. 
 
1.2.     Common examples of publicly available GenAI tools include ChatGPT, Google Bard, Midjourney, Deep Seek etc. These tools can assist with drafting emails, summarising documents, generating reports, creating presentations, and more. They are increasingly being integrated into everyday software used across the public sector. 
 
1.3.     However, it is important to understand that GenAI tools do not “know” facts in the way humans do. They generate content based on probabilities and patterns, which means they can produce inaccurate, misleading, or biased outputs. These tools do not have awareness of context, legal obligations, or local authority policies unless explicitly programmed or guided. 
 
1.4.     This policy has been developed to ensure that any use of Generative AI (GenAI) within Carmarthenshire County Council and by its workforce is ethical, secure, and compliant with legal and regulatory standards. It provides guidance on appropriate use, outlines potential risks, and sets clear expectations for accountability and oversight. 
 
1.5.     Carmarthenshire County Council may subscribe to its own generative AI tools, such as Microsoft Copilot and Magic Notes, which are integrated into the Council’s secure digital environment. These non-public internal generative AI tools are designed to enhance productivity, support collaboration, and streamline routine tasks by leveraging artificial intelligence capabilities. 
 
1.6.     While these tools operate within the Council’s secure digital infrastructure and inherit existing security, compliance, and privacy controls, it is important to recognise that their use may involve the processing of sensitive or personal data. Staff must therefore exercise caution and professional judgement when inputting information into such tools, ensuring that data shared aligns with the Council’s data protection policies and legal obligations. 
 
1.7.     All use of internal generative AI tools must comply with this policy and the Council’s broader information governance framework. Where uncertainty exists regarding the appropriateness of using sensitive data with these tools, staff should seek guidance from the Information Governance Team within Digital Services.