{"resourceId":"cole-county-ai-guidelines-draft-20260926","versions":[{"version":"external-e8b8a9b96fd84f615c698d6a328c6a0ed96d19922a02829c1e03dee8a623e5a8","resource":{"id":"cole-county-ai-guidelines-draft-20260926","title":"Cole County, Missouri drafting employee AI guidelines with human oversight and bans on HIPAA/PII in public models","organization":"Cole County, Missouri (via ABC17 / KMIZ)","sector":"County government IT / workforce policy","geography":"Cole County, Missouri, USA","publishedAt":"September 26, 2026","publicationDate":"2026-09-26","eventDate":"2026-09-26","sourceName":"ABC17 News (KMIZ)","sourceLabel":"Independent local reporting","sourceUrl":"https://abc17news.com/news/cole/2026/09/26/cole-county-developing-guidelines-for-employee-use-of-artificial-intelligence/","evidenceClass":"independent-reporting","outcomeClass":"emerging","topics":["governance-procurement","data-security","accessibility-workforce","operating-model"],"finding":"On Sept. 26, 2026 ABC17 reported Cole County is in “premature stages” of AI guidelines after IS Director Brian Ridenhour presented a rough draft emphasizing transparency, explainability, accountability, and human oversight—especially for decisions significantly affecting a person. Officials warn staff not to put HIPAA-related information or PII into public models such as Google Gemini, require vetting of AI results for accuracy, plan a cross-department oversight committee, consider disclaimers for AI-generated county content, and are working through Microsoft 365 Copilot licensing. No finalize timeline announced.","sledRelevance":"Same-day small-county signal on the stream brief’s implementation-capacity and accountability themes: policy and Copilot procurement are arriving before measured service outcomes, matching NACo’s shadow-AI and inventory warnings.","evidence":"Local TV interview with Presiding Commissioner Sam Bushman and IS Director Brian Ridenhour; describes draft principles and intent, not adopted ordinance text or outcome metrics.","architectureImplications":"Likely M365 Copilot tenant deployment with policy controls; need DLP and clear separation from public consumer AI models.","governanceImplications":"Cross-department committee; human oversight for person-affecting decisions; public AI-content disclaimers; commission adoption still pending.","securityPrivacyImplications":"Explicit ban on HIPAA/PII in public AI; accuracy vetting required; enterprise Copilot preferred for county data once licensed.","caveats":"News report of draft guidelines—not the final policy document. No measured AI service outcomes. Timeline to adoption unknown.","streamIds":["local-government"],"roles":{"sales":"Small and mid-sized counties often start AI policy after staff already use public models. Cole County, Missouri’s Sept. 26 ABC17 report shows officials still in “premature stages,” with IS Director Brian Ridenhour presenting draft principles—transparency, explainability, accountability, human oversight—while moving toward Microsoft 365 Copilot licensing. Discovery should map current informal AI use, HIPAA/PII entry risks, and whether a cross-department committee exists. Bound value to written guidelines and sanctioned tools before problems appear—not to measured service outcomes this story does not provide.","engineering":"Fit is policy-and-platform hygiene: block sensitive data in public Gemini/OpenAI, prefer enterprise Copilot with tenant controls, and require human vetting of AI outputs. Architecture implications are identity-bound M365 Copilot, DLP on prompts, and disclosure labels for county-published AI content. Prerequisites: draft policy adopted, department committee, licensing clarity, and inventory of current tools. Constraints: limited IS capacity, no published timeline to finalize guidelines, and no reported incidents yet (prevention posture). Prove value by completed policy, training completion, and audit samples showing no HIPAA/PII in public models—not by chatbot KPIs.","delivery":"Delivery is committee formation (one representative per department), finalize guidelines, Copilot licensing, and staff training on accuracy vetting and data bans. Dependencies: commission approval, Microsoft licensing, and department participation. Ownership: Information Systems with Presiding Commissioner sponsorship. Skills: employees who verify AI drafts before release. Governance checkpoints: ban on HIPAA/PII in public models, human oversight for decisions affecting persons, and AI-content disclaimers for public materials. Risks: Copilot rollout ahead of policy; guidelines stalling in “premature” status; false sense of security without monitoring."},"roleDetails":{"sales":{"customerProblem":"County staff may already use public AI tools while formal guidelines, Copilot licensing, and oversight committees are still being drafted.","stakeholders":["Presiding commissioner","IS director","Department heads","County counsel","HIPAA-covered program managers"],"discoveryQuestions":["Which public AI tools are staff using today?","When will guidelines and the cross-department committee be finalized?","What is the Copilot licensing and DLP plan?","How will AI-generated public content be disclosed?"],"valueHypothesis":"Early written principles—human oversight, no HIPAA/PII in public models, accuracy vetting—prevent incidents before Copilot expands, even without outcome metrics yet.","potentialEngagement":"Four-week policy sprint: finalize guidelines, inventory tools, stand up department committee, and Copilot accept-use training.","unsupportedClaims":["Measured service improvements from these draft guidelines","That Copilot alone solves accuracy or privacy risk","Incident-free status proving current informal use is safe"]},"engineering":{"fit":"Enterprise M365 Copilot with policy guardrails; block sensitive prompts to public Gemini/OpenAI.","architectureIntegration":"Tenant-bound Copilot, identity controls, DLP/sensitivity labels, optional logging for policy audits; disclosure tags on public AI content.","prerequisites":["Adopted written guidelines","Licensing","Department committee","Data-classification refresher"],"constraints":["Premature-stage policy","No published finalize date","Limited IS bandwidth"],"security":"Prohibit HIPAA/PII in public models; prefer private/enterprise instances; human review before relying on AI outputs.","proofOfValue":["Policy adopted by commission","Training completion rates","Sample prompt audits clean of prohibited data","Committee meeting cadence established"]},"delivery":{"work":"Move from rough draft to adopted guidelines, form committee, complete Copilot licensing, train staff on vetting and data bans.","dependencies":["Commission agenda time","Microsoft licensing","Department nominees","Counsel review"],"ownership":"IS director leads drafting; commissioners own adoption; departments own compliance.","skillsAdoption":"Employees learn to vet AI results and avoid sensitive prompts; managers reinforce oversight for person-affecting decisions.","governanceCheckpoints":["Draft→adopted policy","Committee charter","Copilot go-live tied to training","Public AI-content disclaimer standard"],"acceptanceCriteria":["Guidelines adopted","Committee seated","Copilot enabled only for trained users","Documented ban on HIPAA/PII in public AI"],"risks":["Policy lag behind Copilot","Guidelines stall","Under-enforced honor-system controls"]}},"retrievedAt":"2026-09-26T22:18:37-05:00","enrichedAt":"2026-09-26T22:18:37-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Accuracy vetting and human oversight support reliable public communications; no specific ADA metrics in this news report.","procurementImplications":"Licensing transition to Microsoft Copilot should include contractual data-protection and administrative controls before broad seat rollout.","operatingModelImplications":"Prevention-first: establish expectations and a cross-department committee before scaling staff AI, rather than waiting for an incident.","sourceVerification":{"openedUrl":"https://abc17news.com/news/cole/2026/09/26/cole-county-developing-guidelines-for-employee-use-of-artificial-intelligence/","referenceExcerpt":"the county is still in the “premature stages” of developing guidelines for AI use.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}