Is your team sharing client data with AI tools? Spend one day learning your legal duties, checking your risk and writing your AI policies.

Are you aware of what data your team shares with AI tools?

In most businesses, employees are using AI without telling anyone. If a staff member pastes a client file into any AI tool, in the UK your business is liable and the ICO (the UK data protection regulator) can fine you up to £17.5 million or 4% of your turnover. You also risk breaking client NDAs (confidentiality agreements), voiding your cyber insurance, and facing legal action over unchecked AI mistakes.

Join us in person for one day to understand your legal obligations, audit your risk exposure, and leave with a complete AI governance toolkit ready to roll out.

The day at a glance

When: Thursday 22 April 2027, 09:30 to 16:30.

Where: voco Grand Central Glasgow by IHG, 99 Gordon St, Glasgow G1 3SF.

Price: £295 per person. No booking fee is added.

Included: lunch, refreshments, your AI governance toolkit, and a certificate of attendance.

How the day works

In the morning, we explain the rules on staff using AI. In the afternoon, you write your own AI policies and risk assessment, with our help. You take the finished documents with you.

What the morning covers

How AI is already being used in your business. Which AI tools your staff probably use, whose accounts they are on, and what information has already gone into them.

The law that already applies. Your business is legally responsible for client information that staff put into AI. What the ICO and your own professional body can do about it.

What good control looks like. A written policy and clear rules on what can go into AI. Approved tools set up in the business's name, and one person in charge.

Telling your clients. What to tell your clients, and what to add to the privacy policy on your website.

When something goes wrong. What to do if client information has already gone into an AI tool. The 72-hour deadline for reporting a data breach. Checking AI work before it goes out.

What we have seen other businesses get wrong

Every one of these businesses thought what they were doing was fine. Staff were trying to save time, and nobody had told them where the line was.

A financial advice firm. Advisers put client portfolios, mortgage records and tax returns into an outside AI tool to draft suitability reports.

Outcome: The firm went through a formal data audit, paid compensation to clients and was penalised by its regulator. Clients left, and its professional indemnity insurance went up.

A property management company. Staff uploaded full commercial leases, rent arrears letters and tenants' bank details into a public AI tool to summarise contracts.

Outcome: Major clients ended their contracts straight away. The company paid settlements for breach of contract, and the data protection regulator issued a formal reprimand and required staff retraining.

A private healthcare clinic. Staff pasted patient consultation notes and medical histories into a public AI tool to draft referral letters. Health information has the strongest protection under data protection law.

Outcome: The clinic had to report a data breach within 72 hours, went through a regulatory audit, was fined, and paid compensation to the patients affected.

A recruitment agency. It used automated software to sort CVs and screen candidates.

Outcome: It lost several major clients, paid settlements in employment tribunal claims for unlawful discrimination, and had to stop using the software and rebuild how it hires.

A law firm. Lawyers uploaded confidential case files and witness statements into a free AI tool to draft court documents.

Outcome: The judge struck out the documents and ordered the lawyers personally to pay the other side's legal costs (a "wasted costs order"). Their professional regulator then opened a disciplinary investigation.

An accountancy and bookkeeping firm. Bookkeepers uploaded client spreadsheets, invoices and bank statements into a public AI tool to speed up reconciliations.

Outcome: The firm had to tell the regulator and every affected client within 72 hours. It lost key clients and is now under ongoing compliance monitoring.

The training day shows you how to stop each of these happening in your business.

You leave with your own AI governance toolkit, ready to roll out, and a certificate of attendance.

Who the training is for

Business owners, partners and directors.

Practice managers and office managers.

People responsible for compliance, data protection or HR.

Anyone who has been asked to take charge of AI in their business.

You do not need any technical knowledge.

What to bring

Bring a laptop if you can. You spend the afternoon building your toolkit. We also provide paper copies. Tell us about any dietary requirements or access needs when you book.

Booking for several people

Each person needs their own place, and you can book several places in one order. To train your whole team, we c

Description supplied by the event organiser.