In an era where artificial intelligence (AI) tools are becoming as commonplace as calculators once were, Australian schools are navigating a rapidly evolving landscape of digital opportunity and digital risk. From generative text bots like ChatGPT to image and voice synthesis tools, AI offers the potential to enhance learning, streamline administration and support student engagement. But with opportunity comes the need for robust governance.

AI is not emerging in isolation. Its use intersects directly with cyber safety, data privacy, academic integrity and student wellbeing. As a result, school leaders are now being called upon to consider how AI fits within their broader cyber security strategy.

Why AI risks belong in your cyber security framework

AI risks are not just theoretical. Schools are already seeing students:

• Use AI to generate assignments, bypassing learning and raising concerns about academic integrity
• Input personal or sensitive information into public AI tools, exposing it to unknown data handling practices
• Use AI-generated content to cyberbully or impersonate others online (for example, deepfakes or fake screenshots)
• Encounter harmful or biased outputs from AI platforms that are trained on unregulated datasets

Each of these behaviours brings potential legal, ethical and reputational consequences, not only for students but for schools themselves.

Critically, AI use by students and staff introduces new attack points within school networks. These include unapproved apps, browser extensions and integrations that may not be secure.

Recent developments: governance and legal expectations

While there is currently no specific Australian standard or regulation dedicated to AI in schools, existing frameworks still apply.

• The Privacy Act 1988 (Cth) governs how personal information is collected, used and disclosed, including by AI systems
• State and territory education department policies outline acceptable ICT use and student conduct expectations
• The eSafety Commissioner continues to update guidance on cyberbullying and online harms, including those involving emerging technologies

Governance considerations for school leaders 

School governing bodies should consider the following questions:

• Does your cyber security, ICT and student conduct framework clearly define acceptable AI use?
• Are there approval processes for AI tools used by staff or students?
• Have you assessed AI platforms for security, data handling and bias?
• Are students taught about the limitations, risks and ethics of AI use in learning?
• Is your incident reporting framework prepared to manage misuse of AI?

If the answer to any of these questions is no, then it may be time to review your current approach.

Supporting a culture of safe and ethical AI use 

The introduction of AI in schools should not be about restriction. Instead, it should focus on enabling innovation within a framework of responsibility and safety. By setting clear expectations and educating both staff and students, schools can harness AI's potential while minimising risk.

The key is to ensure that human oversight, ethical guardrails and school values remain central to any use of AI in the school context.

How Ideagen can help

The Ideagen Policy Connect Cyber Security module now includes a dedicated AI governance policy and procedure. This provides a structured framework to define your school’s position on:

• Approved AI tools
• Acceptable and unacceptable uses
• Oversight and accountability
• Privacy and data security expectations

Final thoughts 

Artificial Intelligence is rapidly becoming part of everyday learning. While the risks are real, they can be managed with clear governance, strong policies and proactive education.

Schools that engage with AI now, define their expectations and support their communities to use AI tools safely will be best placed to navigate the opportunities and challenges that lie ahead.