GenAI Guidelines for Use
Scope
This guideline applies to William & Mary community members (including faculty, staff, and students) using GenAI applications or the development of GenAI models. This includes using or developing internal models, third-party models, or publicly available applications such as ChatGPT from a W&M device. These guidelines also apply when using a personal device with W&M data.
Do's:
- Follow William & Mary Security Policies: Review the university's data and information security policies. Only use W&M Single Sign-on (SSO) for logging into university-provided GenAI applications.
- Maintain Transparency: Clearly attribute any output used for work purposes to the GenAI application that created it and maintain an updated record of GenAI use.
- Maintain a Human-in-the-Loop and Adhere to W&M Core Values: Review the output of GenAI applications for potential plagiarism, accuracy and security, and ensure it meets the university’s standards for principles of equity, ethics, and appropriateness. For example, when generating code using GenAI, check for accuracy and security prior to posting/uploading on any university systems.
- Maintain Compliance: Comply with applicable commonwealth and federal laws, regulations (FERPA, HIPAA, etc.), and university policies regarding the use or development of GenAI content or tools.
- Evaluate and Audit IT Tools Regularly: Continuously assess GenAI tools for bias, accuracy, and impact.
Don'ts:
- Compromise Security: Do not re-use university credentials as a login to publicly available GenAI tools. Do not submit any password information into a GenAI tool.
- Harm Confidentiality: Entering W&M data into publicly available GenAI tools allows those tools to be trained on potentially sensitive W&M data or personal intellectual property. Do not input university intellectual property, protected or sensitive information, or personally identifiable information (PII) into non-approved GenAI applications.
- Discriminate: Do not use any output discriminating against individuals based on race, color, religion, sex, national origin, age, disability, marital status, political affiliation, or sexual orientation.
- Engage in Unlawful Conduct: Do not use GenAI applications to create text, audio, or visual content to commit fraud or other unlawful activity, or misrepresent an individual’s identity.
- Implement without vetting: Don't implement GenAI tools (including APIs) without vetting them first. Note: W&M has an IT Approval policy for using new technology at W&M.