AI Safe Starter Pack
Before you use AI in your business,
there are three things you need to know.
If you paste client data into AI tools, you are responsible for where it goes. If you record sessions without consent, you may be breaking the law. If you use free AI tools for client data, you may be processing it unlawfully. The AI Safe Starter gives you the foundational documents to fix all of this — in plain English.
WHAT IS IN THIS PACK — SEVEN DOCUMENTS
One
What's actually happening when you use AI
A plain-English explanation of the data flows created when you use AI tools — and why that makes you legally responsible for where client data goes.
UK GDPR · DPA 2018 · RIPA 2000
Two
AI Disclosure Statement
A client-facing notice that you use AI in your business and how their data is handled. Ready to add to your onboarding pack or website.
Article 13/14 UK GDPR
Three
Privacy Notice Addendum
Extends your existing Privacy Notice to cover AI data processing specifically — the clause most small business notices are currently missing.
Article 5, 13 UK GDPR
Four & Five
Consent Forms — general and Special Category
Legally valid consent forms covering standard client data and health or sensitive data. Two separate forms because the legal standard is different for each.
Article 6, 9 UK GDPR
Six
AI Tool Register
A live register of every AI tool you use, what data it processes, and what safeguards are in place. The ICO expects you to be able to produce this.
Article 5(2), 28, 30 UK GDPR
Seven
AI Decision Records
A record of significant decisions informed or made by AI tools. Protects you if a client or regulator challenges how a decision was reached.
Article 5(2) — Accountability
Who is This For?
-
AI tools used across operations, customer communications, or HR — with or without staff.
-
If you hold any personal data and use any AI tool, this pack covers your foundational obligations.
-
AI-generated programmes using client health data — which is Special Category Data under UK GDPR.
-
AI note drafting, transcription tools, or scheduling platforms that handle session data.
-
Booking platforms holding allergy records. AI marketing tools with client contact data.
-
Using ChatGPT for client reports, session notes, or discovery call transcription.
-
The Creator Action Guide covers the compliance risks specific to freelancers using AI in client work and digital product businesses.