Artificial Intelligence (AI) Protections Policy - Revision history

Mhurlocker at 20:11, September 9, 2026

2026-09-09T20:11:53Z

← Older revision		Revision as of 15:11, September 9, 2026
Line 18:		Line 18:
	\|}		\|}
	[[Compliance Program]] \| [[Compliance Hotline]] \| [[Inspections/Investigations by Third Parties]] \| [[Research Integrity]] \| [[Export Control]] \| [[Code of Conduct]] \| [[Use of Human Anatomical Material]] \| [[Clinical Research and Clinical Trial Professional and Technical Fee Billing]] \| [[Contracts]] \| [[Conflict of Interest]] \| [[Red Flag Identity Theft Prevention Program]] \| [[Principles of Financial Stewardship]] \| [[Human Tissue Use and Transfer]] \| [[Disclosing Foreign Support and International Activities]] \| [[Health Care Vendor Interactions]] \| [[Credit Hour Definition]] \| [[Whistleblower]] \| Electronic Digital Signatures and Records \| [[Utilizing Generative AI\|UNMC AI Use Guidelines]]\| [https://wiki.unmc.edu/index.php?title=Artificial_Intelligence_(AI)_Protections_Policy&action=edit Artificial Intelligence (AI) Protections Policy]		[[Compliance Program]] \| [[Compliance Hotline]] \| [[Inspections/Investigations by Third Parties]] \| [[Research Integrity]] \| [[Export Control]] \| [[Code of Conduct]] \| [[Use of Human Anatomical Material]] \| [[Clinical Research and Clinical Trial Professional and Technical Fee Billing]] \| [[Contracts]] \| [[Conflict of Interest]] \| [[Red Flag Identity Theft Prevention Program]] \| [[Principles of Financial Stewardship]] \| [[Human Tissue Use and Transfer]] \| [[Disclosing Foreign Support and International Activities]] \| [[Health Care Vendor Interactions]] \| [[Credit Hour Definition]] \| [[Whistleblower]] \| Electronic Digital Signatures and Records \| [[Utilizing Generative AI\|UNMC AI Use Guidelines]]\| [https://wiki.unmc.edu/index.php?title=Artificial_Intelligence_(AI)_Protections_Policy&action=edit Artificial Intelligence (AI) Protections Policy]

Mhurlocker at 20:10, September 9, 2026

2026-09-09T20:10:38Z

Show changes

Mhurlocker at 19:49, September 9, 2026

2026-09-09T19:49:02Z

Show changes

Mhurlocker: Mhurlocker moved page UNMC AI Use Guidelines to Artificial Intelligence (AI) Protections Policy

2026-09-09T19:14:34Z

Mhurlocker moved page UNMC AI Use Guidelines to Artificial Intelligence (AI) Protections Policy

← Older revision	Revision as of 14:14, September 9, 2026
(No difference)

Mhurlocker at 19:06, September 9, 2026

2026-09-09T19:06:24Z

← Older revision		Revision as of 14:06, September 9, 2026
Line 17:		Line 17:
	\|[[Faculty]]		\|[[Faculty]]
	\|}		\|}
	[[Compliance Program]] \| [[Compliance Hotline]] \| [[Inspections/Investigations by Third Parties]] \| [[Research Integrity]] \| [[Export Control]] \| [[Code of Conduct]] \| [[Use of Human Anatomical Material]] \| [[Clinical Research and Clinical Trial Professional and Technical Fee Billing]] \| [[Contracts]] \| [[Conflict of Interest]] \| [[Red Flag Identity Theft Prevention Program]] \| [[Principles of Financial Stewardship]] \| [[Human Tissue Use and Transfer]] \| [[Disclosing Foreign Support and International Activities]] \| [[Health Care Vendor Interactions]] \| [[Credit Hour Definition]] \| [[Whistleblower]] \| Electronic Digital Signatures and Records \| [[Utilizing Generative AI\|UNMC AI Use Guidelines]]		[[Compliance Program]] \| [[Compliance Hotline]] \| [[Inspections/Investigations by Third Parties]] \| [[Research Integrity]] \| [[Export Control]] \| [[Code of Conduct]] \| [[Use of Human Anatomical Material]] \| [[Clinical Research and Clinical Trial Professional and Technical Fee Billing]] \| [[Contracts]] \| [[Conflict of Interest]] \| [[Red Flag Identity Theft Prevention Program]] \| [[Principles of Financial Stewardship]] \| [[Human Tissue Use and Transfer]] \| [[Disclosing Foreign Support and International Activities]] \| [[Health Care Vendor Interactions]] \| [[Credit Hour Definition]] \| [[Whistleblower]] \| Electronic Digital Signatures and Records \| [[Utilizing Generative AI\|UNMC AI Use Guidelines]]\| [[Utilizing Generative AI\|UNMC AI Use Guidelines]]

	Policy No.: '''8020'''		Policy No.: '''8020'''

Mhurlocker: /* Guidelines */

2026-09-03T19:23:59Z

Guidelines

← Older revision		Revision as of 14:23, September 3, 2026
Line 42:		Line 42:
	* Not enter confidential, proprietary, or patient-related information that is subject to federal or state regulations or otherwise considered sensitive or restricted. Follow the UNMC policy on [https://wiki.unmc.edu/index.php/Privacy/Confidentiality Privacy, Confidentiality and Security of Patient and Proprietary Information Policy] and applicable privacy laws.		* Not enter confidential, proprietary, or patient-related information that is subject to federal or state regulations or otherwise considered sensitive or restricted. Follow the UNMC policy on [https://wiki.unmc.edu/index.php/Privacy/Confidentiality Privacy, Confidentiality and Security of Patient and Proprietary Information Policy] and applicable privacy laws.
	* Comply with the governance requirements, workforce responsibilities, and principles for the design, development, deployment, and use of AI systems established in the Artificial Intelligence (AI) Protections Policy, applicable to UNMC as an Affiliated Covered Entity.		* Comply with the governance requirements, workforce responsibilities, and principles for the design, development, deployment, and use of AI systems established in the Artificial Intelligence (AI) Protections Policy, applicable to UNMC as an Affiliated Covered Entity.
	* Follow the University of Nebraska’s [https://nebraska.edu/~~-/media/unca~~/docs/~~offices-and-policies~~/~~policies~~/executive-memorandum/policy-for-responsible-use-of-university-computers-and-information-systems.pdf Policy for Responsible Use of University Computers and Information Systems], [https://nebraska.edu~~/-/media/unca/docs/offices-and-policies~~/policies/~~executive~~-~~memorandum/policy-on-research-and-data-security.pdf~~ Policy on Research Data and Security,] and [https://nebraska.edu~~/-/media/unca/docs/offices-and-policies~~/policies/~~executive-memorandum/policy-on~~-~~risk-classification-and-minimum-security-standards.pdf~~ Policy on Risk Classification and Minimum Security Standards].		* Follow the University of Nebraska’s [https://docs.nebraska.edu/unop/docs/Board of Regents/Policies/executive-memorandum/policy-for-responsible-use-of-university-computers-and-information-systems.pdf Policy for Responsible Use of University Computers and Information Systems], [https://nebraska.edu/policies/#docaccess-96b9f70eb1d19751ba4515a3e2fe8c5507b2504b8b72eb16682eec557b8149ee Policy on Research Data and Security,] and [https://nebraska.edu/policies/#docaccess-1816dab165ab8f2e6da479f76c46931dd66ac1f81d132602a1c2cbaaa9695875 Policy on Risk Classification and Minimum Security Standards].

	3. All UNMC users are accountable for their academic or professional work, regardless of the tools used to produce it. When using generative AI tools, users should always verify the information produced for errors and biases and exercise caution to avoid copyright infringement.		3. All UNMC users are accountable for their academic or professional work, regardless of the tools used to produce it. When using generative AI tools, users should always verify the information produced for errors and biases and exercise caution to avoid copyright infringement.

Mhurlocker at 19:19, September 3, 2026

2026-09-03T19:19:14Z

← Older revision		Revision as of 14:19, September 3, 2026
Line 23:		Line 23:
	Effective Date: 03/07/2025		Effective Date: 03/07/2025

	Revised Date: 06/04/~~2025~~		Revised Date: 08/19/2026

	Reviewed Date: 06/04/~~2025~~		Reviewed Date: 08/19/2026

	'''<big>UNMC AI Use Guidelines</big>'''		'''<big>UNMC AI Use Guidelines</big>'''

	== Basis for Policy ==		== Basis for Policy ==
	Ethical and responsible use of artificial intelligence (AI) must be paramount in all university activities that seek to develop or enhance AI systems or implement the use of AI technologies. UNMC is committed to engaging with AI in support of its academic, research, patient care, and community engagement missions. These guidelines seek to balance the new possibilities offered by generative AI and other AI-enabled tools with awareness of their limitations and the need for rigorous attention to accuracy, intellectual property, security, privacy, and ethical issues. The appropriate use of AI and AI-enabled tools requires a collaborative approach among UNMC administrators, faculty, staff, students, information security partners, and NU campus partners.		Ethical and responsible use of artificial intelligence (AI) must be paramount in all university activities that seek to develop or enhance AI systems or implement the use of AI technologies. UNMC is committed to engaging with AI in support of its academic, research, patient care, and community engagement missions. These guidelines seek to balance the new possibilities offered by generative AI and other AI-enabled tools with awareness of their limitations and the need for rigorous attention to accuracy, intellectual property, security, privacy, and ethical issues. The appropriate use of AI and AI-enabled tools requires a collaborative approach among UNMC administrators, faculty, staff, students, information security partners, and NU campus partners.

	== Scope ==		== Scope ==
Line 40:		Line 40:
	2. Be mindful of including sensitive information in AI tools. External generative AI tools incorporate every user interaction into their model, including the prompts, data, and reactions you supply. Any information entered into external generative AI tools is considered public and may be stored and used by anyone else. UNMC employees and students are expected to:		2. Be mindful of including sensitive information in AI tools. External generative AI tools incorporate every user interaction into their model, including the prompts, data, and reactions you supply. Any information entered into external generative AI tools is considered public and may be stored and used by anyone else. UNMC employees and students are expected to:

	* Not enter confidential, proprietary, or patient-related information that is subject to federal or state regulations or otherwise considered sensitive or restricted. Follow the UNMC policy on [https://wiki.unmc.edu/index.php/Privacy/Confidentiality Privacy, Confidentiality and Security of Patient and Proprietary Information Policy] and applicable privacy laws.		* Not enter confidential, proprietary, or patient-related information that is subject to federal or state regulations or otherwise considered sensitive or restricted. Follow the UNMC policy on [https://wiki.unmc.edu/index.php/Privacy/Confidentiality Privacy, Confidentiality and Security of Patient and Proprietary Information Policy] and applicable privacy laws.
			* Comply with the governance requirements, workforce responsibilities, and principles for the design, development, deployment, and use of AI systems established in the Artificial Intelligence (AI) Protections Policy, applicable to UNMC as an Affiliated Covered Entity.
	* Follow the University of Nebraska’s [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/policy-for-responsible-use-of-university-computers-and-information-systems.pdf Policy for Responsible Use of University Computers and Information Systems], [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/policy-on-research-and-data-security.pdf Policy on Research Data and Security,] and [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/policy-on-risk-classification-and-minimum-security-standards.pdf Policy on Risk Classification and Minimum Security Standards].		* Follow the University of Nebraska’s [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/policy-for-responsible-use-of-university-computers-and-information-systems.pdf Policy for Responsible Use of University Computers and Information Systems], [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/policy-on-research-and-data-security.pdf Policy on Research Data and Security,] and [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/policy-on-risk-classification-and-minimum-security-standards.pdf Policy on Risk Classification and Minimum Security Standards].

Line 51:		Line 52:
	4. Employees and students must maintain current awareness of ethical and responsible use of AI in research and creative activities by regularly reviewing university policies and relevant guidelines from funding agencies.		4. Employees and students must maintain current awareness of ethical and responsible use of AI in research and creative activities by regularly reviewing university policies and relevant guidelines from funding agencies.

	5. Before entering into agreements with vendors, subcontractors, or collaborators, it is important to inquire about any potential use of AI. Any new solution involving AI—or any addition of AI to an existing solution—must go through the risk assessment process, as outlined in [https://info.unmc.edu/~~its~~-security/~~policies~~/~~procedures/imriskassessment~~.html UNMC/Nebraska Medicine IM #63: Risk Assessment Policy]. To ensure responsible and ethical use of AI in line with these guidelines, additional terms and conditions may be required in current or future agreements.		5. Before entering into agreements with vendors, subcontractors, or collaborators, it is important to inquire about any potential use of AI. Any new solution involving AI—or any addition of AI to an existing solution—must go through the risk assessment process, as outlined in [https://info.unmc.edu/resources/info-security/information-management/im-risk-assess.html UNMC/Nebraska Medicine IM #63: Risk Assessment Policy]. To ensure responsible and ethical use of AI in line with these guidelines, additional terms and conditions may be required in current or future agreements.

	6. ~~Federal~~ funding agencies prohibit the use of AI tools during the peer-review process. The National Institutes of Health (NIH), in its discussion of AI peer review, explains that using AI in the peer review process is a breach of confidentiality because peer review is a confidential process and these tools “have no guarantee of where data are being sent, saved, viewed or used in the future.” The National Science Foundation (NSF) shares guidelines for declaring the use of AI in proposals and explicitly prohibits the use of AI in the NSF merit review process.		6. Federal funding agencies prohibit the use of AI tools during the peer-review process. The National Institutes of Health (NIH), in its discussion of AI peer review, explains that using AI in the peer review process is a breach of confidentiality because peer review is a confidential process and these tools “have no guarantee of where data are being sent, saved, viewed or used in the future.” The National Science Foundation (NSF) shares guidelines for declaring the use of AI in proposals and explicitly prohibits the use of AI in the NSF merit review process.

	== Use for Education ==		== Use for Education ==

Mhurlocker: /* Guidelines */

2026-08-20T16:39:21Z

Guidelines

← Older revision		Revision as of 11:39, August 20, 2026
Line 36:		Line 36:

	== Guidelines ==		== Guidelines ==
	1. Per [https://~~nebraska~~.edu~~/offices~~-~~policies/policies/no-42-policy-on-risk-classification-and-minimum-security-standards~~ Executive Memorandum No. 42, Policy on Risk Classification and Minimum Security Standards], only public or Low Risk Data may be used with AI tools—unless a legal enterprise agreement and confidentiality agreement have been established with the third party ''and'' the required assessment process has been completed, or the tool is listed on the UNMC Approved Technology List.		1. Per [https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnebraska.edu%2Fpolicies%2F%23docaccess-1816dab165ab8f2e6da479f76c46931dd66ac1f81d132602a1c2cbaaa9695875&data=05%7C02%7Cmhurlocker%40unmc.edu%7Ce6ca5382c75248f5ad7008defed8db37%7C84a28940b46441c3ba3bb4fa6665bc05%7C0%7C0%7C639228404518790294%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=uJKuZ1hrVpSe58%2B2ANGKzrzEfSaJ2mcsQ2PfA6l9BR8%3D&reserved=0 Executive Memorandum No. 42, Policy on Risk Classification and Minimum Security Standards], only public or Low Risk Data may be used with AI tools—unless a legal enterprise agreement and confidentiality agreement have been established with the third party ''and'' the required assessment process has been completed, or the tool is listed on the UNMC Approved Technology List.

	2. Be mindful of including sensitive information in AI tools. External generative AI tools incorporate every user interaction into their model, including the prompts, data, and reactions you supply. Any information entered into external generative AI tools is considered public and may be stored and used by anyone else. UNMC employees and students are expected to:		2. Be mindful of including sensitive information in AI tools. External generative AI tools incorporate every user interaction into their model, including the prompts, data, and reactions you supply. Any information entered into external generative AI tools is considered public and may be stored and used by anyone else. UNMC employees and students are expected to:

Mhurlocker at 15:25, June 4, 2025

2025-06-04T15:25:50Z

← Older revision		Revision as of 10:25, June 4, 2025
Line 21:		Line 21:
	Policy No.: '''8020'''		Policy No.: '''8020'''

	Effective Date: ~~Draft~~ 03/07/2025		Effective Date: 03/07/2025

	Revised Date:		Revised Date: 06/04/2025

	Reviewed Date:		Reviewed Date: 06/04/2025

	'''<big>UNMC AI Use Guidelines</big>'''		'''<big>UNMC AI Use Guidelines</big>'''
Line 51:		Line 51:
	4. Employees and students must maintain current awareness of ethical and responsible use of AI in research and creative activities by regularly reviewing university policies and relevant guidelines from funding agencies.		4. Employees and students must maintain current awareness of ethical and responsible use of AI in research and creative activities by regularly reviewing university policies and relevant guidelines from funding agencies.

	5. Before entering into agreements with vendors, subcontractors, or collaborators, it is important to inquire about any potential use of AI. Any new solution involving AI—or any addition of AI to an existing solution—must go through the risk assessment process, as outlined in UNMC/Nebraska Medicine IM #63: Risk Assessment Policy. To ensure responsible and ethical use of AI in line with these guidelines, additional terms and conditions may be required in current or future agreements.		5. Before entering into agreements with vendors, subcontractors, or collaborators, it is important to inquire about any potential use of AI. Any new solution involving AI—or any addition of AI to an existing solution—must go through the risk assessment process, as outlined in [https://info.unmc.edu/its-security/policies/procedures/imriskassessment.html UNMC/Nebraska Medicine IM #63: Risk Assessment Policy]. To ensure responsible and ethical use of AI in line with these guidelines, additional terms and conditions may be required in current or future agreements.

	6. Federal funding agencies prohibit the use of AI tools during the peer-review process. The National Institutes of Health (NIH), in its discussion of AI peer review, explains that using AI in the peer review process is a breach of confidentiality because peer review is a confidential process and these tools “have no guarantee of where data are being sent, saved, viewed or used in the future.” The National Science Foundation (NSF) shares guidelines for declaring the use of AI in proposals and explicitly prohibits the use of AI in the NSF merit review process.		6. Federal funding agencies prohibit the use of AI tools during the peer-review process. The National Institutes of Health (NIH), in its discussion of AI peer review, explains that using AI in the peer review process is a breach of confidentiality because peer review is a confidential process and these tools “have no guarantee of where data are being sent, saved, viewed or used in the future.” The National Science Foundation (NSF) shares guidelines for declaring the use of AI in proposals and explicitly prohibits the use of AI in the NSF merit review process.

Mhurlocker: /* Guidelines */

2025-06-04T15:19:41Z

Guidelines

← Older revision		Revision as of 10:19, June 4, 2025
Line 36:		Line 36:

	== Guidelines ==		== Guidelines ==
	1. Per Executive Memorandum No. 42, Policy on Risk Classification and Minimum Security Standards, only public or Low Risk Data may be used with AI tools—unless a legal enterprise agreement and confidentiality agreement have been established with the third party ''and'' the required assessment process has been completed, or the tool is listed on the UNMC Approved Technology List.		1. Per [https://nebraska.edu/offices-policies/policies/no-42-policy-on-risk-classification-and-minimum-security-standards Executive Memorandum No. 42, Policy on Risk Classification and Minimum Security Standards], only public or Low Risk Data may be used with AI tools—unless a legal enterprise agreement and confidentiality agreement have been established with the third party ''and'' the required assessment process has been completed, or the tool is listed on the UNMC Approved Technology List.

	2. Be mindful of including sensitive information in AI tools. External generative AI tools incorporate every user interaction into their model, including the prompts, data, and reactions you supply. Any information entered into external generative AI tools is considered public and may be stored and used by anyone else. UNMC employees and students are expected to:		2. Be mindful of including sensitive information in AI tools. External generative AI tools incorporate every user interaction into their model, including the prompts, data, and reactions you supply. Any information entered into external generative AI tools is considered public and may be stored and used by anyone else. UNMC employees and students are expected to:

	* Not enter confidential, proprietary, or patient-related information that is subject to federal or state regulations or otherwise considered sensitive or restricted. Follow the UNMC policy on [[Privacy/Confidentiality\|Privacy, Confidentiality and Security of Patient and Proprietary Information Policy]] and applicable privacy laws.		* Not enter confidential, proprietary, or patient-related information that is subject to federal or state regulations or otherwise considered sensitive or restricted. Follow the UNMC policy on [https://wiki.unmc.edu/index.php/Privacy/Confidentiality Privacy, Confidentiality and Security of Patient and Proprietary Information Policy] and applicable privacy laws.
	* Follow the University of Nebraska’s Policy for Responsible Use of University Computers and Information Systems, Policy on Research Data and Security, and Policy on Risk Classification and Minimum Security Standards.		* Follow the University of Nebraska’s [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/policy-for-responsible-use-of-university-computers-and-information-systems.pdf Policy for Responsible Use of University Computers and Information Systems], [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/policy-on-research-and-data-security.pdf Policy on Research Data and Security,] and [https://nebraska.edu/-/media/unca/docs/offices-and-policies/policies/executive-memorandum/policy-on-risk-classification-and-minimum-security-standards.pdf Policy on Risk Classification and Minimum Security Standards].

	3. All UNMC users are accountable for their academic or professional work, regardless of the tools used to produce it. When using generative AI tools, users should always verify the information produced for errors and biases and exercise caution to avoid copyright infringement.		3. All UNMC users are accountable for their academic or professional work, regardless of the tools used to produce it. When using generative AI tools, users should always verify the information produced for errors and biases and exercise caution to avoid copyright infringement.
Line 72:		Line 72:

	=== For Everyone ===		=== For Everyone ===
	If you are uncertain about the approval status of a particular AI tool or require guidance on its appropriate use, please refer to the UNMC Approved Technology List. If still uncertain, please reach out to Information Technology Services (ITS) with any questions.		If you are uncertain about the approval status of a particular AI tool or require guidance on its appropriate use, please refer to the [https://nebraskamed.service-now.com/kb_view.do?sysparm_article=KB0012191 UNMC Approved Technology List]. If still uncertain, please reach out to Information Technology Services (ITS) with any questions.

	== Use for Research ==		== Use for Research ==