Guide · Data, AI and technology

Using AI safely in education and learner support

Using AI safely in education: how FE colleges and training providers can use generative AI in learner support with data protection, human review and clear limits.

Updated 7 min read

Guide at a glance

Reading time
7 minutes
Sections
9
Primary sources
7
Questions answered
6

Checked against official guidance. Updated 9 October 2026.

In short

AI can save learner support staff time on drafting and summarising, but only with clear limits: keep personal data out unless it is strictly necessary and protected, have a person meaningfully review every output, never let AI decide what support a learner gets, and assess the risks in a DPIA first. DfE guidance says staff remain responsible for anything they produce with AI.

Generative AI is already in FE. Staff use it to draft emails, summarise meetings and rewrite documents in plain English. In learner support, the time savings are tempting: a support plan drafted from conversation notes, a review summary in minutes, an easy-read version of a letter. But learner support records are among the most sensitive data a provider holds, and the people they describe are often young, disabled or vulnerable. The risks are real too.

This guide sets out where AI can help, where it should never be used, and the safeguards that make the difference. It draws on DfE guidance, the DfE product safety standards and ICO guidance. It is not legal advice, and the ICO notes that its AI guidance is under review following the Data (Use and Access) Act 2025.

What does DfE guidance say about using AI safely in education?

DfE’s guidance on generative AI in education applies to schools and colleges in England. The points most relevant to learner support:

  • Personal data must be protected in line with data protection law. The guidance recommends keeping personal data out of generative AI tools, and where it is strictly necessary to use it, taking all steps to protect it.
  • Professional judgement is required. Staff must use their professional judgement, and responsibility for final documents stays with the professional and their organisation, whatever tools were used.
  • Outputs must be checked. Content needs critical judgement for appropriateness and accuracy, because AI can produce false information presented as fact.
  • Learners’ work must not train AI without permission or a copyright exception.
  • Safeguards must be in place where students use AI.

DfE also publishes product safety standards for edtech developers and suppliers, which colleges can use to assess products. They cover filtering, monitoring and reporting, security, privacy and data protection, intellectual property, design and testing, governance, and, since January 2026, cognitive development, emotional and social development, mental health and manipulation. Among other things, they say products should not use personal data for commercial purposes and should store only the minimum data necessary.

Where can AI help in learner support?

AI is most useful for low-risk drafting and formatting tasks where a knowledgeable person checks the result.

TaskRisk levelWhy
Rewriting a letter in plain English or easy readLowerCan be done without personal data; easy to check
Generating general adjustment ideas for a type of needLowerNo personal data needed; staff choose what fits
Drafting a support plan from notes the learner agreedMediumPersonal and special category data; output must be checked against the learner’s words
Summarising a review meetingMediumRisk of missing or distorting what the learner said
Suggesting which learners need attentionHigherProfiling; risk of bias and of staff over-relying on it
Deciding eligibility, support level or fundingDo not useSignificant decisions about learners must be made by people
Anything about safeguarding or risk of harmDo not useNeeds trained professional judgement and established procedures

Where should AI never be used?

Draw firm lines and write them into policy.

  1. No AI decisions about support. AI should not decide, approve or refuse support. Under the UK GDPR as amended by the Data (Use and Access) Act 2025, a significant decision based wholly or partly on special category data cannot be taken solely by automated processing except in limited circumstances (Article 22B). A decision is “solely” automated where there is “no meaningful human involvement” (Article 22A). Beyond the law, a learner deserves a person who is accountable for decisions about them.
  2. No diagnosis. AI must never suggest or imply a diagnosis. Learner support responds to need, and diagnosis is for qualified professionals.
  3. No safeguarding judgements. Use your safeguarding procedures and trained staff.
  4. No sharing outside the organisation by AI. A person decides what is shared, with whom, and on what basis.
  5. No unapproved tools. Staff should not paste learner information into personal or consumer AI accounts.

What makes human review meaningful?

Meaningful review is more than a click. A reviewer should:

  • have the knowledge and authority to change or reject the draft
  • compare the draft with the source, especially the learner’s own words
  • check for invented details, such as an adjustment nobody agreed or a condition nobody mentioned
  • check tone: respectful, person-first or identity-first as the learner prefers, no deficit language
  • edit the draft, rather than accept it as is by default
  • be the named author of what is saved

Watch for automation bias, the tendency to trust a confident-sounding output. It grows when staff are busy. Building review into the workflow, with the AI draft clearly labelled until a person saves it, helps.

Fictional example. A learning support coordinator records a conversation with Aisha, 17, who says she finds group work stressful and wants to know the topic of each session in advance. An AI tool drafts a support plan section. The draft says Aisha “has social anxiety” and recommends “excusing her from group work”. The coordinator notices that Aisha never mentioned a diagnosis, and that she asked for advance notice, not to be excused. She rewrites the section in Aisha’s words and saves it as her own work. The draft saved time on structure; the human review stopped two errors reaching Aisha’s record.

How do you keep learner data safe when using AI?

Treat an AI feature like any other processing of special category data, with extra attention to where the data goes.

  • Do a DPIA first. The ICO lists innovative technology such as AI among the factors that point to a DPIA. See DPIA for learner support software.
  • Know the AI provider. Which company processes the data, where, and under what contract?
  • No training on your data. Contracts should prevent the supplier and AI provider using learner data to train models.
  • Minimise inputs. Send only what the task needs. Remove names and identifiers where possible.
  • Retention. Prompts and outputs should not be kept by the AI provider longer than necessary.
  • Off by default. The ICO’s 2026 edtech audits found AI features sometimes introduced without safeguards or switched on by default. Choose tools where AI is optional and switched on deliberately.
  • Transparency. Tell learners in your privacy information where AI is used.

How do you check AI for bias?

Ask how outputs differ across groups of learners, and test it yourself. Bias can appear in language, such as describing some learners in more negative terms, in suggestions, such as recommending different support for similar needs, or in omissions. Practical checks:

  • run the same scenario with different names, ages or backgrounds and compare outputs
  • ask disabled learners and staff to review sample outputs
  • monitor a sample of saved records for patterns over time
  • give staff an easy way to report problematic outputs

The ICO’s guidance on AI and data protection has a chapter on fairness that covers bias and discrimination.

How should you introduce AI to a learner support team?

Start small, measure honestly and be ready to stop. A sensible approach:

  1. Pick one low-risk task. For example, rewriting standard letters in plain English, using no personal data.
  2. Agree what success means. Time saved, quality of output, staff confidence, and learner feedback. Decide in advance what would make you stop.
  3. Complete the DPIA before any personal data is used. Involve your DPO from the start, not at the end.
  4. Train the people involved. Cover what the tool can and cannot do, how to review, automation bias, and how to report problems.
  5. Ask learners. A learner panel can tell you how they would feel about AI being used to draft their plans, and what would reassure them.
  6. Review after a set period. Look at a sample of outputs and saved records. Did review catch errors? Were any missed? Did anything get worse?
  7. Expand only with evidence. Move to a medium-risk task only when the first one is working and the safeguards are proven.

Expect some staff to be enthusiastic and others wary. Both are useful. The enthusiasts find uses; the sceptics find problems.

What should an AI policy for learner support include?

Keep it short and practical. A one-page policy for learner support teams might cover:

  1. approved tools, and a ban on unapproved ones for learner data
  2. permitted tasks and prohibited uses, based on the tables above
  3. review rules: who can save AI-drafted content and what they must check
  4. labelling: how AI-drafted content is marked before review
  5. data rules: what can and cannot be entered
  6. training for staff, including automation bias
  7. how learners are told, and how they can ask questions or object
  8. how to report a problem, and who reviews the policy

Link it to your existing data protection, safeguarding and acceptable use policies rather than duplicating them.

How does Inclusion Studio support this process?

Inclusion Studio is learner support software being built for FE colleges and apprenticeship providers in England, currently pre-pilot with a prototype using fictional learners. Its AI drafts feature is optional and the full support journey works without it. Drafts are labelled, and a person reviews before anything is saved. AI never diagnoses, refuses support, makes decisions, shares externally, or is trained on case records. The prototype uses a sample draft. Gemini on Google Cloud Vertex AI is the selected AI provider. It has been exercised with synthetic data only, in a preview environment, at an EU multi-region endpoint accepted for preview use. Where real learner data would be processed is not decided, the live application uses a mock, and no real learner data has been sent to any AI provider. Our AI principles set out these commitments in full.

Frequently asked questions

Can we put learner information into ChatGPT or similar tools?

Not into general consumer tools. DfE guidance recommends keeping personal data out of generative AI tools and, where it is strictly necessary, taking all steps to protect it. Learner support data is often special category data, so use only tools your organisation has approved after a DPIA.

Can AI decide what support a learner should get?

It should not. Decisions about support affect learners significantly and usually involve health or disability data. UK GDPR restricts significant decisions based solely on automated processing of special category data, and good practice is for a person to make every support decision.

What counts as meaningful human review of an AI draft?

The reviewer has the knowledge and authority to change or reject the draft, checks it against the source information and the learner's own words, and actually edits it where needed. Clicking approve without reading is not meaningful review.

Do we need a DPIA before using AI in learner support?

Very likely. The ICO lists innovative technology such as AI among the factors that point to a DPIA, and learner support involves special category data about often vulnerable learners.

Can a supplier train its AI on our learners' records?

Only if you agree and there is a lawful basis, which is hard to justify for sensitive learner support records. DfE guidance also says schools and colleges must not allow students' original work to be used to train generative AI without permission. Check contracts carefully.

Should learners be told when AI was used?

Yes. Be open in your privacy information about where AI is used, and label AI-drafted content so staff and learners know a person has reviewed it.

Sources and further reading

Official guidance changes. Check the source before relying on any detail, and take professional advice for individual cases.

Help shape the pilot

We are working with a small number of England FE colleges and apprenticeship providers first. Tell us about your learner support and we will be in touch.