FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Aipedia: Management consultants
The ICMCI Code of Responsible Use of AI is a 2026 professional standard that makes human review, client disclosure and data safeguards mandatory for Certified Management Consultants. Its clauses also describe the evidence a consultant will want if a client later sues.
Part of: AI in Management consultants
In short
ICMCI launched version 1.0 of its Code of Responsible Use of Artificial Intelligence for the Management Consulting Profession on 4 June 2026, after Board adoption in May. Section 3 makes its principles mandatory for individual CMCs, and firms are expected to align proportionately. The core duties are meaningful human review (3.1), disclosure when AI materially shapes work (3.3, 7.1), confidentiality (3.4, 8.3), documentation (3.6) and no unreviewed output (5.2). Serious or repeated breaches may lead to discipline. For PI, the Code mainly matters as a benchmark of reasonable care and as a checklist for your evidence file.
ICMCI, the International Council of Management Consulting Institutes, sets the international Certified Management Consultant standard. It has published two AI documents:
| Document | Date | Status | Focus |
|---|---|---|---|
| Navigating the Future: A Guide to AI in Management Consulting | 6 June 2024 | Non-binding white paper | AI technology, an ethics framework, the legal landscape and use cases |
| Code of Responsible Use of Artificial Intelligence for the Management Consulting Profession, v1.0 | Adopted May 2026, launched 4 June 2026 | Public Professional Standard; mandatory for individual CMCs | Human oversight, transparency, confidentiality, accountability, engagement terms |
The Code builds on the ICMCI Code of Conduct. The launch announcement presents it as a global standard. In the UK, the Institute of Consulting's own code does not mention AI, and whether the IC or CMI will adopt the ICMCI Code for UK CMC or Chartered Management Consultant holders has not been confirmed.
Section 3 states that the principles are mandatory professional standards for individual CMCs. Firms and member institutes are expected to align their policies in proportion to their size and risk, which is softer wording. A consultant without CMC status is not bound by it. In practice that distinction may not help much in a negligence claim: the common law asks what a reasonably competent consultant would have done, and a published professional code is an obvious place for an expert witness to look.
Using AI does not reduce a consultant's accountability. Misuse of AI, such as submitting unverified AI output as finished work, is a breach of the Code of Conduct. Evidence file: sign-off records naming who approved each deliverable.
AI-supported outputs need meaningful human review before they reach clients, and consultants must be able to explain AI-assisted results. High-risk uses need a qualified person who can override or stop the system. Evidence file: review notes, source checks and a short explanation of how key figures were derived.
Clients must be told when AI materially shapes analysis, recommendations or deliverables. 7.2 adds that uses involving personal data, profiling or automated decisions generally need explicit client agreement. Evidence file: the engagement letter, any AI disclosure in the report and the client's written agreement.
Confidential or personal data must not go into AI tools that may reuse it, train on it or expose it unless proper safeguards are in place. 8.4 requires outputs to be checked for IP infringement. Evidence file: the approved tools list, data settings and any data processing terms.
Consultants should document their use of AI. Evidence file: a simple log of which tool was used, for which task and who checked it.
Unreviewed AI output must not be presented as professional work, and AI does not replace professional competence. Evidence file: working papers showing your own reasoning, not just the prompt history.
Engagement terms should cover AI scope, IP, data protection and restrictions. Consultants must maintain AI literacy through CPD, and serious or repeated breaches may lead to disciplinary action.
For most firms the Code turns into five habits: an approved tools list, a review step before anything leaves the firm, a standard AI clause in engagement letters, a line in reports where AI materially shaped the work, and a short record per engagement. These are cheap to adopt and they line up with what public buyers can ask under PPN 017. The engagement terms guide looks at 7.1 to 7.3 in more detail, and the fake citations guide applies 3.1 and 5.2 to desk research.
The Code does not create a new cause of action. Clients still sue for breach of contract or negligence. Its effect on a claim is evidential: a consultant who can show review, disclosure and documentation in line with the Code is easier to defend, while one who cannot may struggle to show reasonable care. If the Deloitte cases had arisen in a UK engagement, the first questions would likely be who reviewed the references and whether the client knew AI was used.
PI insurers may not require Code compliance, and no regulator or professional-body statement on AI and PI was found. Consultants' PI wordings may respond to negligence claims whatever tools were used, subject to the terms, and insurers may ask about AI controls at renewal. A documented Code-aligned process is a useful answer. See whether PI covers AI mistakes, what to document about AI use and chartered status and PI.
Apex arranges PI for management consultants. A broker can check how your policy and proposal form deal with AI and help you present your Code-aligned controls to insurers. Start with the management consulting AI overview.
The ICMCI Board adopted version 1.0 in May 2026 and it was launched on 4 June 2026. Its principles are stated to be mandatory professional standards for individual Certified Management Consultants, so CMCs should treat it as current.
Not directly. It binds individual CMCs, and firms and institutes are expected to align proportionately. However, a court or expert assessing reasonable care may look at it as a sign of accepted good practice in consulting, so non-members can benefit from following it.
Not of itself. PI policies are triggered by claims for negligence or breach of professional duty, and a breach of a professional code is not usually an exclusion. What matters is the policy wording, accurate disclosure at renewal and prompt notification of any claim or circumstance.
This has not been confirmed. The Institute of Consulting Code of Professional Conduct and Practice requires competence, honesty, integrity and a duty of care, but its public page does not mention AI.
Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.
Start a PI quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.
