Davis County narrows AI policy, removes blanket approval requirement for departments

Davis County commissioners on April 21 approved changes to county policy 04.01.1200 governing generative artificial intelligence, removing a blanket requirement that Information Systems pre-approve departmental AI use and narrowing data restrictions to explicitly bar confidential or regulated information.

Jeff Hassett, the countys information systems presenter, told the commission the edits were aimed at balancing operational flexibility with security. "I am not in the business of approving what you use or what you don't use for your departments," he said, explaining the county had removed a prior line that required IS permission. He added that the county will "be adequately funding AI platforms for the county" and that "users will be limited to utilizing approved AI platforms" to protect data and control access.

The ordinance-language changes also struck a generic exclusion for "personal data" and replaced it with a restriction that explicitly covers "confidential, protected, controlled or otherwise regulated data," Hassett said, allowing departments to use AI tools for routine work while keeping sensitive information out of third-party systems that the county does not control.

Commissioners asked whether Human Resources had reviewed the edits; the clerk confirmed HR had no objections. The commission approved the policy changes by voice vote.

The policy change takes effect immediately for county operations; departments will coordinate with IS on approved platforms and security practices going forward.