FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Aipedia: Project managers
AI can allocate people, plant and budgets across projects, but decisions about individuals engage UK GDPR and a missed capacity shortfall can still be the PM's responsibility. Resource plans feed programmes and cost forecasts, so errors spread.
Part of: AI in project management
In short
Resource and capacity planning tools use AI to match people to tasks, forecast demand and flag overallocation across a portfolio. They process personal data about staff and contractors, sometimes including performance, availability and skills. Since 5 February 2026, solely automated significant decisions about individuals fall under UK GDPR Articles 22A to 22D. Separately, a resource plan that misses a capacity gap can delay a client's project and lead to a negligence claim. Client claims usually fall under PM PI, subject to the wording, while staff complaints are a different exposure.
PMOs may use AI to match people to roles based on skills and availability, forecast demand across a portfolio, flag overallocation, suggest which projects to slip, and plan plant or specialist subcontractor capacity. On client-side roles, a PM may advise the client on whether its own teams, consultants and supply chain have the capacity a programme assumes.
The data is often patchy. Timesheets lag, skills records are out of date, and availability ignores leave, sickness or work on other clients' projects. A model working from that data produces an optimistic plan.
Optimism compounds across a portfolio. If every project's plan assumes the same specialist or the same small team is free, the conflict only becomes visible when two deadlines collide. A good tool flags the clash; a poorly configured one quietly double-counts.
Two sets of duties apply. First, data protection: staff and contractor data in a resource tool is personal data. Where a decision with a significant effect on an individual, such as removal from a project or a performance flag, is based solely on automated processing, Articles 22A to 22D apply, inserted by section 80 of the Data (Use and Access) Act 2025 and in force from 5 February 2026. They require safeguards including information, the ability to make representations, human intervention and a way to contest. Second, professional duty: advice to a client on capacity is professional advice judged against a competent PM. On construction projects, a client must check competence and resources before appointing under Part 2A regulation 11E, and PMs often run those checks. For RICS-regulated PMs, the RICS AI standard requires a written reliability decision on material outputs (4.2).
Illustrative scenario. A PM advises a client on a programme of school refurbishments over a summer window, using AI to check consultant and contractor capacity. The tool counts a specialist subcontractor as available on all sites at once because their commitments elsewhere were not in the data. Several sites miss the window, and the client claims the cost of temporary arrangements, saying its PM failed to identify an obvious capacity risk.
Inside the PM's own firm, an AI tool that automatically removes staff from projects based on utilisation scores, with no human review, risks a data protection complaint and an employment dispute.
A client claim for loss caused by negligent capacity advice is usually treated as professional negligence under PM PI, subject to the terms. Claims by your own staff about how they were treated are not usually PI matters; employment practices liability cover may be relevant. Data protection fines and some data claims are commonly excluded or limited under PI, so check how your cover responds; see GDPR cover within PI and AI risk factors insurers look at.
Apex arranges PI for project managers, and a broker can review the line between PI, cyber and employment covers for AI resource tools. See AI programme scheduling, AI tender evaluation, AI lessons-learned search and the AI in project management hub.
No, but it sets conditions. You need a lawful basis and transparency, and where a significant decision about someone is solely automated, Articles 22A to 22D require safeguards including human intervention and a way to contest.
When given to a client it usually is, and it is judged against what a competent PM would have advised. Showing assumptions and data gaps helps the client understand how much weight to put on it.
Usually not. PI responds to claims about your professional services to clients. Employment disputes are normally an employment practices liability matter, and regulatory fines are commonly excluded.
Only with a lawful basis, transparency and appropriate terms with the contractor, and only the data you need. Where the tool is provided by a third party, check where the data goes and whether it is used to train models.
Decisions with legal or similarly significant effects, such as removal from work, pay or disciplinary outcomes, are likely to qualify. Routine scheduling suggestions that a manager reviews are less likely to, but assess each use.
Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.
Start a PI quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.
