FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Aipedia: Project managers
Before a project manager puts a client's programme, cost report or correspondence into an AI tool, they need to check the appointment, any NDA and any client AI policy. Project data is commercially sensitive, and a breach can lose the client and lead to a claim.
Part of: AI in project management
In short
Project managers handle some of a client's most sensitive information: budgets, tender prices, programmes, disputes, board papers and staff details. Appointments may restrict how that information is used and who it can be shared with, and some clients may ban or limit AI processing of their data. RICS-regulated PMs may not upload confidential client data to AI without express prior written consent. UK GDPR applies to personal data in project files. A breach of confidence may be covered by some PI policies, while data protection breaches commonly fall to cyber cover.
Programmes and progress data for scheduling tools; cost reports and commitments for forecasting; meeting recordings and transcripts; contractor correspondence and contract documents; tender returns; stakeholder lists and complaints; board papers for status reports. Much of it is commercially confidential, and some of it belongs to third parties such as bidders or contractors who provided it on limited terms.
The route into the tool matters as much as the data. Enterprise tools procured by the firm usually come with contractual terms on retention, training and location of data. Free or personal accounts usually do not, and staff under time pressure tend to reach for whatever is quickest. Plug-ins, browser extensions and notetakers can also take data without anyone deliberately uploading it.
Illustrative scenario. A client's supplier code bans the use of public generative AI tools on its information. A PM, under pressure to produce a board report, pastes the cost report and a summary of a commercial dispute into a generative AI chatbot on a personal account. The client's audit discovers it. The client terminates the appointment, alleges breach of contract and confidence, and asks what happened to the data.
Less obvious routes include AI notetakers joining client calls, browser extensions that read documents, and shared knowledge tools that make one client's data searchable by teams working for another.
Breach of confidence arising from professional services is covered by some PI wordings and excluded or limited in others. Breach of data protection law and incidents caused by cyber events or system failures are commonly excluded under PI; the RICS Approved Minimum Wording, for example, carries an endorsement excluding both. Contractual liabilities beyond what the law would impose, such as indemnities in a supplier AI policy, may also fall outside PI. See data protection civil claims and PI and GDPR cover within PI.
Apex arranges PI for project managers. A broker can review your cover and how your PI and cyber policies would respond to a confidentiality or data incident involving AI. See AI lessons-learned search, AI meeting minutes, does PM PI cover AI errors? and the AI in project management hub.
Only if your appointment, any NDA and the client's AI policy allow it, and with a tool whose terms protect the data. RICS-regulated PMs need express prior written consent before uploading confidential client data.
General confidentiality clauses still apply, and they may limit use or disclosure of client information. Telling the client how you use AI, and agreeing it in writing, avoids later argument.
It can be, if personal data is processed without a lawful basis or proper terms, or if the provider uses it in ways you have not authorised. Whether it is reportable depends on the facts and the risk to individuals.
It depends on the wording and the claim. Breach of confidence may be covered by some PI policies, but contractual indemnities and data protection breaches are commonly excluded or limited, and cyber cover may be relevant.
Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.
Start a PI quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.
