AI policy
Overview
Elsevier commits to fostering a culture of trust, responsibility, and continuous improvement in the use of AI, ensuring that AI-enabled solutions deliver value while safeguarding the interests of customers, authors, researchers, employees, partners, and society. Elsevier and its subsidiaries are committed to the responsible design, development, deployment, and use of artificial intelligence.
Elsevier recognizes that AI is increasingly used to support and influence human decision-making and may have real-world impacts on individuals, communities, and society. Accordingly, we are committed to ensuring that AI is developed and used in ways that are purposeful, fair, transparent, accountable, and respectful of privacy, and that risks of harm, misuse, or unintended consequences are actively identified and managed. Elsevier’s AI systems will include appropriate human oversight and clear ownership and accountability across design, development, deployment, and use, commensurate with risk.
Elsevier’s approach to AI governance is grounded in its Responsible AI Principles, which emphasize consideration of real-world impacts, prevention of unfair bias, appropriate transparency and explainability, human oversight and accountability, and robust data governance.
The AI Policy applies to all Elsevier personnel, including all officers, directors, employees, contractors, and agents acting on the Company’s behalf in any of our global operations.
Artificial Intelligence Management System (AIMS)
The AI Policy is part of our Artificial Intelligence Management System (AIMS). The AIMS defines a framework to enable all teams to responsibly use AI systems in compliance with applicable laws, regulations, contractual obligations, and ethical standards. The AIMS enables Elsevier to responsibly develop, deploy, operate and monitor AI systems and:
Define responsibilities for AI use
Identify and assess AI-related risks
Provide transparency and accountability
Manage data quality and system performance
Address ethical, legal and societal concerns, and monitor AI systems throughout their lifecycle
The Company’s AI systems and assets are identified, inventoried, and managed within the AIMS. Each AI system has an identified owner responsible for compliance with this policy and applicable governance requirements.
Legal and regulatory
The AI Policy has been developed in accordance with applicable laws, regulations, and guidance relating to the responsible development, deployment, and use of artificial intelligence, as in force in the jurisdictions in which Elsevier operates. Elsevier's AI governance is designed to align with applicable AI-specific legislation and broader legal frameworks with AI-relevant dimensions, including:
European Union Artificial Intelligence Act (Regulation (EU) 2024/1689);
UK AI Regulation — sector-specific regulatory guidance issued by UK regulators, including the ICO, FCA, and CMA, in line with the UK government's pro-innovation approach to AI oversight;
UK General Data Protection Regulation (GDPR);
Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (CETS No. 225);
European Union General Data Protection Regulation (GDPR);
EU Data Act (Regulation (EU) 2023/2854); and
US State AI Legislation.
In the event of any conflict between this Policy and applicable law or regulation, the applicable law or regulation prevails. Elsevier recognises that AI-related legal and regulatory requirements are evolving. Compliance obligations are identified, assessed, and managed through Elsevier’s Artificial Intelligence Management System (AIMS) and associated governance, risk, and impact assessment processes. In addition to applicable laws and regulations, Elsevier follows recognized AI standards and guidance frameworks, including:
Artificial Intelligence Management Systems, ISO/IEC 42001:2023
Artificial Intelligence Risk Management, ISO/IEC 23894:2023
AI System Life Cycle Processes, ISO/IEC 5338:2023
AI Concepts and Terminology, ISO/IEC 22989:2022
NIST AI Risk Management
OECD Principles on Artificial Intelligence (OECD/LEGAL/0449)
UNESCO Recommendation on the Ethics of Artificial Intelligence (2021)
Information Security Management Systems, ISO 27001:2022
Risk assessment
AI systems shall undergo appropriate impact and risk assessments prior to deployment, for material changes, and where otherwise required by AIMS governance. Assessments shall consider security, privacy, ethical, legal, and societal risks.
Third-party risk management
Any Third-Party AI Providers — who provide AI software, models, APIs, or platforms procured by Elsevier for direct use or integration into Elsevier products and systems — shall be subject to pre-onboarding due diligence.
Training
To ensure proper awareness of the risks associated with AI, Elsevier employees must complete mandatory training. Employees are required to certify understanding and compliance with this Policy on a periodic basis.