Ethical AI: Why Boards Can’t Afford to Treat it as a “Tech Issue” Anymore

Across Irish boardrooms, one thing is becoming increasingly clear: AI has shifted from theoretical talking point to practical reality. It is analysing customer behaviour, streamlining operations and even helping to prepare the information directors rely on for decision making. That creates tremendous upside but also a new layer of governance responsibility.

In our recent webinar with IoD Ireland, “Ethical AI: Director Leadership, Risk and Responsibility,” one theme was clear: AI is now a strategic asset and an enterprise risk. Boards can’t delegate it to the IT team and hope for the best.

The AI Risk - Opportunity Equation

On the opportunity side, AI promises faster insight, smarter scenario planning and new sources of value creation. But the same tools can just as easily amplify bias, obscure accountability and expose organisations to regulatory and reputational damage if they are deployed without guardrails.

Common risk themes we discussed included:

• Hidden bias in algorithms that can lead to unfair outcomes for customers or employees
• “Black box” models that no one can explain or challenge
• Reputational damage 
• Regulatory non-compliance

The core governance question is no longer “Should we use AI?” Boards should be asking: “Where are we already using AI, what could go wrong, and how are we managing that risk?”

From Tech Project to Board Level Governance

Around the world, boards are waking up to the fact that AI oversight now sits squarely within their fiduciary remit. Research from Diligent Institute and Corporate Board Member shows that 60% of legal, compliance and audit leaders cite technology as their top risk concern, yet only 29% say their organisation has a comprehensive AI governance plan in place. At the same time, just 8% of directors rate their board’s AI expertise as strong.

That gap is precisely where ethical AI governance belongs on the board agenda. Directors don’t need to become data scientists, but they do need to ensure that:

• Clear governance frameworks and acceptable use policies are in place
• Roles and responsibilities for AI oversight are defined
• AI risk is integrated into existing risk, audit and compliance structures — not treated as an add on

In other words, AI is now a board level governance responsibility, not a technology decision.

Regulatory and Compliance Considerations

Regulation is rapidly moving from background noise to board-level pressure. The EU AI Act is helping set a new baseline for how AI should be governed. Ethical AI can no longer be treated as a reputational “nice to have” or a voluntary values statement. It is increasingly a compliance necessity. For boards, that means expecting management to take a proactive approach: understanding where AI is already in use, identifying higher-risk applications, aligning internal policies to legal and regulatory requirements, and making sure governance obligations are clearly owned across legal, compliance, risk and operational teams. 
Organisations that move early will be better placed not only to reduce regulatory exposure, but also to build the trust and resilience that responsible AI adoption demands.

Balancing Innovation with Accountability

A recurring concern in the webinar was how to encourage innovation without opening the door to uncontrolled experimentation. The boards we see making the most progress are not trying to ban AI; they are channelling it.

Practically, that means:

• Allowing “controlled experiments” with AI in low risk areas
• Classifying AI use cases by risk level and applying proportionate oversight
• Requiring human in the loop review for higher impact decisions
• Setting expectations that AI supports, rather than replaces, director judgment

This balance between innovation and accountability is at the heart of ethical AI. Done well, it keeps organisations competitive while protecting stakeholders from harm.

Embedding Ethical AI Across Strategy, Risk and Culture

Ethical AI is not a single policy that lives on an intranet page. It needs to be woven through corporate strategy, enterprise risk management and organisational culture.

That includes:

• Treating AI risk alongside cyber, third party and operational risk in the enterprise risk register
• Ensuring AI related issues flow into the relevant board and committee agendas
• Investing in AI literacy for directors and executives so they can ask the right questions
• Encouraging a culture where staff feel responsible for raising concerns about data, bias or misuse

Leaders set the tone. If the board frames AI purely as an efficiency play, ethical considerations will always be an afterthought. If it frames AI as a strategic governance issue, the organisation will respond accordingly.

Transparency, Trust and the Road Ahead

Ultimately, ethical AI comes down to trust. Stakeholders need confidence that AI enabled decisions are explainable, fair and aligned with the organisation’s values. That means moving away from opaque “black box” systems toward models and processes that can be interrogated and justified when it matters most. Directors don’t have to navigate this alone. Frameworks such as the NIST AI Risk Management Framework and the EU AI Act provide useful structure, while education programmes like Diligent Institute’s AI Ethics & Board Oversight Certification are helping boards build the literacy they need for informed oversight.

The boards that will thrive in the AI era are not the ones that move fastest at any cost. They are the ones that make AI innovation and ethical accountability two sides of the same strategy. The challenge for boards isn't choosing between innovation and accountability. It's ensuring the two move forward together. Because ultimately, ethical AI is not about slowing innovation down. It's about creating the trust, transparency and oversight that allow organisations to adopt it with confidence.  For organisations looking to strengthen board oversight of AI, our guide “From AI talk to real impact: How today’s leaders do more without adding headcount” explores how governance, risk and compliance leaders are putting those principles into practice. 

This article is the view of the author(s) and does not necessarily reflect IoD Ireland’s policy or position.

About the Author

Dottie Schindlinger is Executive Director of the Diligent Institute, the corporate governance research and programs arm of Diligent. She co-authored Governance in the Digital Age, co-hosts The Corporate Director Podcast, and provides thought leadership on governance, AI, cybersecurity and technology through presentations to boards and executives around the world.

Her work has been featured in Fortune, Forbes, The Wall Street Journal and Bloomberg, and she was a founding team member of BoardEffect, acquired by Diligent in 2016.