Responsible AI governance

The Role of the Board

The board holds ultimate accountability for the organisation’s use of AI, making engagement a fiduciary duty rather than an optional oversight function. To govern effectively, boards must move beyond delegating AI strategy and decisions entirely to technical teams and instead provide high-level stewardship that aligns technology with organisational values, risk appetite, and long-term sustainability. Board members individually and collectively need to appreciate both the opportunities and the risks that technology presents.

This begins with rigorous strategic oversight, where directors challenge the narrative of inevitability and scrutinise the "why" behind every major AI initiative. Adoption must be driven by genuine strategic need and due diligence, not by FOMO or peer pressure. If a business case relies solely on the novelty of the technology or the fact that competitors are using it, the board has a duty to pause and demand a stronger, values-led justification.

Beyond strategy, directors must possess a functional literacy in AI risks to ask probing questions. They cannot absolve themselves of the need to understand what these technologies are and can or cannot do. While they need not be data scientists, they must understand the nuances of algorithmic bias, data privacy vulnerabilities, the potential for workforce deskilling, and the reputational dangers of "ethics-washing." A board that cannot distinguish between a vendor’s marketing claims and technical reality is ill-equipped to govern.

This literacy enables the board to act as ethical stewards, setting a tone from the top that prioritises human welfare and integrity over speed or cost-cutting. They must define the organisation’s red lines or areas where AI will not be used regardless of potential profit and ensure that clear accountability chains exist. Crucially, the board must ensure that the organisation’s legal defence strategy (compliance) does not become confused with its ethical framework (morality), recognising that compliance should be the floor and what is legal isn’t always ethical.

Boards should survey their composition, using a skills matrix to highlight weaknesses in its knowledge and skillset, feeding the output into recruitment efforts. Some boards have adopted the approach of actively seeking to appoint a digital lead or digital trustee to provide a focal point for board oversight (though of course the responsibility remains collective).

Ethical Principles

Ethical principles form the moral compass of an organisation’s AI strategy so they cannot be outsourced or adopted from a generic template. No external vendor or industry body can dictate what is ethical in a particular context, or in relation to particular communities; these principles must be intrinsically tied to an organisation’s unique mission and core values. Defining them requires an intentional, deliberate process under clear leadership and developed in consultation with staff and stakeholders. This ensures the principles are not abstract but a genuine reflection of the organisation’s collective conscience and operational reality.

But defining these principles is only the beginning. For ethical principles to be meaningful, they must be operationalised as the primary filter for decision making. They must be embedded in procurement, risk assessments, and performance reviews, possessing the authority to halt projects that violate core values. True responsible governance means that these self-defined principles are lived and defended, even when it is difficult or costly to do so. It is much easier said than done. 

Embedding AI governance in your organisation

Effective AI governance cannot exist as a standalone policy document or a siloed committee; it must be embedded into the very fabric of the organisation’s culture, operations, and decision-making processes. Embedding governance means creating an environment where responsible AI use is the default behaviour, not an afterthought, and where transparency, human oversight and control, and collaboration are integrated. It requires shifting from a mindset of "compliance at the end" to "responsibility by design," ensuring that ethical considerations are present at every stage of the AI lifecycle, from conception to decommissioning.

AI Leadership

Governance begins with clear leadership and defined structures that empower responsible decision making through collaboration and clear accountability. While the specific model will depend on the organisation's size and complexity, ranging from a formal AI Governance Committee to a lighter weight steering group, the fundamental requirement remains the same: cross-departmental input is non-negotiable. AI impacts too many areas to be managed by IT alone, so any chosen body should include representatives from legal, compliance, data science, HR, operations and ethics (where an organisation has these), alongside voices from the front line, that is those who might come into contact with AI platforms. For sports bodies, this should also include athlete or participant