Write and test a one-page AI policy for a real small business

The situation

A digital marketing agency in Karachi with twelve staff uses AI every day: drafting client posts, summarising briefs, generating images. Nobody has written down any rules. Last month a junior pasted a client's unreleased product plan into a public chatbot, and another sent an AI-written blog that quoted a statistic nobody could find.

Write the policy the agency will actually follow, test it against the real failures, and prove an ordinary staff member understands it.

What you'll be able to show

• Identify which of the four common harms the business is most exposed to
• Decide when AI use must be disclosed to a client
• Run a simple bias test on a real task
• Write a one-page policy that a non-technical person can explain back

What you need

• Any general AI assistant
• A word processor
• Invented client names and data only

Tasks

1. 1Find the exposure

   List the agency's AI uses. For each of the four harms (invented facts, leaked confidential data, undisclosed AI work, unfair output), rate the agency's exposure high, medium or low, with one sentence of evidence.
   A correct result: A four-row table with ratings and a sentence of evidence each.

2. 2The disclosure clause

   Draft the clause the agency will add to client contracts about AI use: what it is used for, what is always checked by a person, and what client data never goes into public tools. Keep it under 120 words.
   A correct result: A contract clause under 120 words, and a note on how a colleague reacted to it as a client.

3. 3Test for bias

   Take one real agency task (for example writing a job advert or a customer reply). Run it five times changing only a name or a city (for example Ayesha, Bilal, Karachi, Quetta, Gilgit). Record what changed.
   A correct result: Five outputs side by side and a note on any difference that is not justified by the change.

4. 4Green, amber, red

   Write the data lists for the agency: green (may paste freely), amber (only after removing names and numbers), red (never). Name the approved tools and the person to ask.
   A correct result: Three lists with at least four items each, the approved tools, and a named contact.

5. 5The one-page policy

   Write the policy under six headings: purpose, approved tools, data rules, checking rules, disclosure, and who to ask. One or two lines each, one page total.
   A correct result: A one-page policy under the six headings.

6. 6Prove it is understood

   Give the policy to the least technical person you know. Ask them to explain back what they may paste and what must be checked. Record their answer and fix anything they misread.
   A correct result: Their answer in their own words and the changes you made because of it.

What to hand in

The exposure table, the contract clause, the bias test, the three data lists, the one-page policy, and the explain-back record with your fixes.

How it is marked