Responsible AI Use in Higher Education

Responsible use starts before a prompt is written. The educator or institution remains accountable for the purpose, the data, the decision, and its effects on students. AI can support professional judgment; it should not replace it.

A proportionate decision process

Data protection and privacy

Do not paste identifiable student work, grades, disability or health information, disciplinary records, private communications, unpublished research, or confidential institutional material into an unapproved service.

Consent alone does not automatically make a tool or use compliant. In an educational relationship, consent may not always be freely given, and an institution still needs an appropriate legal basis, purpose, security measures, retention rules, and processing arrangements. The EU’s GDPR principles include lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, security, and accountability.¹

Practical safeguards include:

• remove names, student numbers, and indirect identifiers;
• share only the minimum information needed for the task;
• prefer synthetic examples when real records are unnecessary;
• check contracts and settings rather than relying on an “incognito” label;
• keep source material and reviewed final work in approved storage; and
• report accidental disclosure through institutional procedures.

Running a model locally can reduce disclosure to a third-party provider, but it does not by itself resolve lawful-basis, access-control, security, bias, or copyright questions.

High-impact educational uses

Under the EU AI Act, some systems used to determine access or admission, evaluate learning outcomes in ways that steer a person’s education, assess an appropriate educational level, or monitor prohibited behaviour during tests may be classified as high-risk.² Classification depends on the system’s intended purpose and how it is used—not simply on whether it is called “generative AI”.

Do not introduce AI as the sole or decisive basis for:

• admitting, ranking, placing, passing, failing, or awarding a grade;
• alleging plagiarism, cheating, or other misconduct;
• making disciplinary, welfare, or disability-support decisions; or
• inferring a student’s ability, motivation, emotion, or future performance.

These workflows require specialist institutional assessment. They may also require risk management, data governance, documentation, oversight, transparency, monitoring, and a meaningful route for people to challenge the outcome. The AI Act also requires providers and deployers to take measures that support an appropriate level of AI literacy among relevant staff.³

Human oversight that is actually meaningful

A person merely clicking “approve” is not meaningful oversight. The reviewer should be able to:

• inspect the original evidence and the criteria used;
• recognise common model errors and automation bias;
• change or reject the output without penalty;
• explain the final decision in their own words; and
• offer an accessible correction or appeal process.

For consequential uses, periodically test whether errors are concentrated among particular groups or types of work. Stop the workflow if the reviewer cannot independently establish that it is reliable and fair enough for its purpose.

Transparency and academic integrity

Set expectations for both educators and students. An assignment should say:

• whether AI use is required, permitted, limited, or prohibited;
• which stages or tools are allowed;
• what must be disclosed or cited;
• what evidence of process should be retained; and
• how students can complete an equivalent task without the tool.

A simple disclosure can be enough for low-risk work:

I used [tool and version, if known] on [date] to [purpose]. I reviewed the output by [checks performed] and remain responsible for the submitted work. Material retained from the output: [brief description].

Disclosing AI use does not make fabricated citations, undisclosed outsourcing, or prohibited assistance acceptable. Apply the learning outcomes and the local academic-integrity policy.

Copyright and licensing

Provider terms, copyright protection, permission to reuse source material, and academic attribution are different questions. A service’s terms may allocate contractual rights in an output, but they do not guarantee that the output is copyright-protected, non-infringing, accurate, or acceptable under an institution’s rules.

Keep track of important source material, licences, and substantial human contributions. Avoid prompts intended to imitate a living creator or reproduce a protected work. Review outputs for recognisable passages, images, code, or other material before publishing them. The EU Intellectual Property Office maintains current guidance and resources on copyright and generative AI.⁴

Tool-selection checklist

Before adopting a tool, confirm:

• Purpose: it solves a defined teaching or operational need;
• Approval: procurement, privacy, security, and accessibility requirements are met for the intended use;
• Data controls: retention, training use, deletion, location, and access are understood;
• Evidence: users can inspect sources or compare outputs with authoritative material;
• Equity: cost, language, accessibility, and account requirements do not create an avoidable barrier;
• Oversight: a named person owns review and final decisions;
• Exit: work can be exported and the activity can continue if the tool changes or becomes unavailable; and
• Review: the use has an owner and a date for reassessment.

A reusable review record

Copy this into a course or project file:

Purpose and expected benefit:
People affected:
Tool and version:
Data entered and its classification:
Consequence if the output is wrong:
How outputs will be verified:
Human decision owner:
How the use will be disclosed:
Accessibility or non-AI alternative:
Institutional approvals or consultations:
Review date and stop conditions:

Further guidance

• Guidelines on the ethical use of artificial intelligence and data in teaching and learning for educators , European Commission, updated 2026
• AI Act Service Desk: education and vocational training , European Commission
• When to use generative AI, SAGE’s shorter task-level checklist

References & Footnotes

• European Commission. (2026). Guidelines on the ethical use of artificial intelligence and data in teaching and learning for educators. https://doi.org/10.2766/9548952