Generative AI Checklist for School Leaders

A ready-to-use checklist based on the Department for Education's guidance for schools in England on generative AI and data protection (December 2024), helping school leaders introduce generative AI safely and responsibly.

The checklist covers:

• Understanding what generative AI is and how it works
• Data protection risks of using generative AI in schools
• Developing a school policy on generative AI use
• Staff training on the safe and responsible use of AI
• Checking with your data protection officer or IT lead on acceptable use
• Understanding open vs. closed AI tools and their security implications
• Checking your approach against data protection legislation with your data protection officer
• Fact-checking AI-generated content for accuracy
• Acknowledging and referencing AI use in school work
• Staying up to date via ICO, JCQ and Ofsted guidance on AI

Which guidance it reflects

• Written against the December 2024 update of DfE's Generative AI and data protection in schools. DfE updated that page on 23 March 2026 and removed its section on open and closed generative AI, so check the checklist's open and closed tools item against the current page.
• The current page also says to check a tool's age restrictions before pupils use it, and to agree with your data protection officer before any pupil's personal data goes into a tool.
• For choosing tools, DfE's Generative AI: product safety standards were updated on 19 January 2026 with new standards on cognitive development, emotional and social development, mental health and manipulation. They are written for suppliers, and schools can use them to judge products. The checklist predates them.

Who it is for and when to use it

For headteachers, the data protection officer and the IT lead. Use it before the school approves a generative AI tool, when you write or review the school's AI policy, and when you plan staff training.

Includes a completed-by/date field and space for notes against each item, so it can be signed off and kept as evidence.

Based on GOV.UK: Generative artificial intelligence (AI) and data protection in schools. Delivered as an editable Word document. This is a starting point only — always check the latest official guidance before relying on it.