OVERVIEW

1. PURPOSE

2. SCOPE

3. AI & LLM Use Guidelines:

3.1 No College-Provided Tools: The College currently does not provide or endorse any specific AI/LLM tools. Users are responsible for adhering to this policy when using AI/LLM services and must be mindful of other College policies related to acceptable use, information security, data governance, and regulatory compliance.

3.2 Applicability to All Services: Whether an AI/LLM service is free or accessed via a paid personal account, users are bound by the provisions of this policy and all related College policies regarding data security, privacy, and intellectual property.

3.3 Prohibited Upload of Copyrighted Material: It is prohibited to upload copyrighted materials or intellectual property that you do not own to any AI/LLM tool. Currently, the legal framework surrounding the use of copyrighted content for AI model training is evolving, and there are ongoing debates about who may authorize that training. Some jurisdictions and copyright holders assert that explicit permission is required to use copyrighted materials for AI training, while others argue that certain uses may fall under "Fair Use" exceptions, though this has not been conclusively determined by courts. Until clearer guidelines are established, users must assume that uploading copyrighted materials to AI/LLM platforms without authorization may violate copyright laws and College policies, potentially resulting in legal and disciplinary consequences.

3.4 Prohibited Upload of Confidential Data: There is often little disclosure about how AI/LLM models currently store and process data, or incorporate trained data into generated content. As a result, AI/LLMs have unexpectedly exposed data to unintended parties. Such an event occurring with College data could pose serious security and compliance risks to the College. As such, users must not upload private, sensitive, or confidential College data to AI/LLM tools, where data may violate regulatory compliance-mandated data retention policies.

3.5 Prohibited Upload of Protected Information (PI): It is a violation of College policy to upload or otherwise provide student or employee Protected Information (PI) to any AI/LLM. This includes, but is not limited to, social security numbers, financial data, academic records, and medical information. For a comprehensive list of the types of PI governed by laws such as the Gramm-Leach-Bliley Act (GLBA), consult the College's Information Security Policy.

4. POLICY VIOLATIONS:

The College may issue a warning, deny access to computing resources, refer for prosecution, or administer other penalties, depending upon the nature of the infraction. Violations will be handled according to normal disciplinary review procedures for students, faculty, or staff as applicable and may result in disciplinary action, up to and including suspension without pay, termination of employment, expulsion from further study, or for third parties, the suspension or revocation of the third party’s relationship with Lake Forest College. Unauthorized use of AI/LLM tools that compromise the College’s data security or compliance with regulatory obligations may also result in legal consequences.

RELATED POLICIES:

• Acceptable Use of E-Resources Policy
• GLBA Compliance Policy
• Information Security Policy
• Technology Procurement & Vendor Management Policy
• Privacy Policy
• Network Policy
• Student, Faculty, and Staff Handbooks

Document Control: