Extend what you have
Map AI into existing risk registers, processor inventories and IT change boards. New committees only help if they have authority and rhythm. Many dioceses succeed with a small cross-functional AI working group reporting to an existing leadership body—not a standing “AI cabinet” with no budget and no mandate.
Framework elements that fit on one wall chart
- Principles (including human dignity and non-neutrality of tools)
- Use-case intake form
- Risk tiering linked to data classes
- Approval matrix (who may say yes)
- Vendor standards
- Monitoring KPIs
- Review calendar
Regulatory awareness without panic
Track GDPR duties now; watch EU AI Act obligations as they apply to your role as deployer or provider. Seek counsel for high-risk automation. Most administrative drafting aids are governance problems first, not science-fiction problems. Pair with GDPR guidance for dioceses.
Documentation boards will actually read
One inventory, one principles page, last audit date, open risks and a decisions log. That pack beats a hundred-page policy no trustee finishes. When something goes wrong, the log is what proves you governed rather than improvised.
How this sits beside Magnifica Humanitas
Frameworks can become paperwork that never touches practice. Magnifica Humanitas (2026) insists technology carries commitments and that we must remain profoundly human. Use that as a test for every framework element: does this form, committee or metric actually protect persons and truth—or does it only create a folder labelled “AI”?
If a control has no owner and no calendar date, it is decoration. Delete it or staff it.