What to include.
WHAT TO COVER
Approved tools What may be sent, and what may never be What must be reviewed, by whom What may never be generated Who is accountable Disclosure requirements
WHAT MAY NEVER BE SENT
Customer personal data, unless specifically permitted Financial records Credentials Confidential material Anything under an obligation to a third party
WHAT MAY NEVER BE GENERATED
Testimonials and reviews Statistics Case study facts Quotations attributed to real people Assessments of individuals
THE ACCOUNTABILITY CLAUSE
Whoever sends or publishes is responsible, whatever produced the draft.
State it explicitly.
LENGTH
One or two pages. Longer is not read.
TRAINING
A policy nobody was trained on is not a control.
REVIEWING
Annually, and whenever tools or guidance change.
WHY NOT BAN IT
Prohibition drives use onto personal accounts with no oversight.
