CASRAI Dictionary

Tag: ai in universities

  • Generative AI Academic Integrity Policy 2026: Why University Rules Still Don’t Agree

    Generative AI academic integrity policy in 2026 remains fragmented: new peer-reviewed research from Springer and Cambridge University Press argues that universities cannot credibly enforce integrity standards while their own AI rules stay incoherent, even as searchers hunt for a mythical “30% rule” that does not exist in higher-education policy. Disclosure-threshold rules are proliferating faster than any shared standard — and convergence needs a common taxonomy, not more institution-specific thresholds.

    Academic integrity policy on generative AI is the set of institutional rules governing when, how, and whether students and researchers must disclose the use of AI tools in coursework, assessment, and scholarly output. As of mid-2026, no cross-institutional consensus exists on disclosure thresholds, detection reliability, or enforcement — only a widening patchwork of course-by-course and department-by-department rules.

    What does 2026 research actually say about AI and academic integrity?

    Two major 2026 publications converge on the same diagnosis, even though they approach it from different angles. Taylor et al., writing in Higher Education (Springer, 2026), conclude that universities cannot credibly enforce integrity standards in the age of AI without first ensuring coherence between their stated policies — a coherence that, in practice, rarely exists across a single institution’s own departments and courses.

    Gallant et al.’s Cambridge University Press Element, Academic Integrity in the Age of AI (2026), frames the same problem in sharper terms: generative AI “has rapidly and universally disrupted teaching, learning, and assessing with integrity.” Neither publication treats this as a temporary adjustment problem. Both treat it as a structural governance gap.

    That gap is not merely academic. A systematic literature review published in MDPI Information (Bittle et al., 2025) — now cited in well over 250 subsequent papers — found the evidence base on generative AI’s impact on academic integrity in higher education growing far faster than any agreed institutional response to it. The research volume has outpaced the policy convergence it was meant to inform.

    Why are disclosure-threshold policies multiplying instead of converging?

    University AI policy has moved past outright bans, but what replaced them is not one model — it is at least four, operating simultaneously, often within the same institution. The result is a patchwork where a rule that applies in one seminar room is void in the next.

    Policy model Example What it requires Enforcement
    Prohibition University of Cambridge, Faculty of History and Philosophy of Science AI may not be used as a source or quoted directly Academic misconduct procedure
    Disclosure-with-permission University of Kent; Solent University AI use permitted if declared, aligned with “fairness, transparency, accountability” Declaration checked at marking
    Course-level discretion Carnegie Mellon University Individual instructors set the rule per assignment, from total ban to full permission Devolved to instructor/department
    Integrated-tool model Emerging across STEM and data-science departments AI treated as a citable tool, akin to a calculator or search engine Attribution required, not a use-threshold

    The Office of the Independent Adjudicator for Higher Education, which handles student complaints across UK universities, notes that almost all AI-related complaints it receives come from students already subject to a misconduct procedure — evidence that disputed detection and inconsistent policy, not deliberate misuse, drive much of the caseload.

    Three structural forces keep these models from converging:

    • Decentralised governance — departments and individual instructors set their own rules, so no single institutional policy actually governs a student’s experience.
    • Detection unreliability — AI-detection tools produce enough false positives that no institution can safely anchor discipline to a single similarity or probability score.
    • A moving technical target — a policy calibrated to one model generation is frequently obsolete by the next; UNESCO-cited research highlights how generative AI is disrupting assessment methods that rely on final written output, such as essays, faster than institutions can rewrite their rules.

    Is there really a “30% rule” for AI use at university?

    No. Search interest in a “30% rule for AI” in academic-integrity contexts is real, but the rule itself is not an education-sector standard — it is a general AI-automation heuristic, describing a guideline that AI should handle roughly 70% of repetitive or preparatory work while humans retain the remaining 30% for oversight, creativity, and judgement in business and knowledge-work settings. No UK, US, or Australian university academic-integrity policy has adopted a codified 30% (or any single-number) disclosure threshold as of 2026.

    What some institutions have instead is a detection-review band: similarity or AI-probability scores that trigger human review of a submission, rather than an automatic misconduct finding. This is a procedural safeguard against detector false positives, not a permitted-use quota, and it varies by tool and by institution rather than following any shared figure. Searchers conflating the two are importing a business-automation concept into a governance vacuum that genuinely has no numeric answer yet.

    What would workable policy convergence actually require?

    A workable convergence needs a shared disclosure taxonomy, not another round of institution-specific thresholds. Three elements are prerequisites, based on where the Springer and Cambridge research locates the current failure points:

    • A common vocabulary for AI-use tiers — categories such as “AI-assisted drafting,” “AI-assisted research,” and “AI-generated content requiring full disclosure,” defined once and adopted consistently, rather than redefined by every syllabus.
    • Separation of detection from adjudication — using AI-detection scores only to flag cases for human review, never as standalone evidence of misconduct, addressing the false-positive problem identified in current casework.
    • Sector-level reference points, comparable to how research-integrity bodies such as COPE and ICMJE set shared expectations for publication ethics, giving individual universities a common baseline rather than each rebuilding policy from first principles.

    Institutional research-administration teams evaluating their own policy coherence can compare their current rules against a structured framework for research administration governance rather than treating AI-use policy as a standalone, one-off document.

    Common questions on AI and academic integrity

    Is using AI considered plagiarizing?

    It depends entirely on the institution’s specific policy and whether the use was disclosed. Using AI-generated content without proper attribution is treated as academic dishonesty at most universities, similar to unattributed use of another author’s work, but disclosed and permitted AI assistance is not automatically classed as plagiarism.

    What is the 30% rule for AI?

    The “30% rule” is a general AI-automation heuristic — AI handles roughly 70% of routine work, humans retain 30% for oversight and judgement — not an academic-integrity standard. No university has adopted a codified 30% disclosure or permitted-use threshold as of 2026; the term is being misapplied from business contexts into education searches.

    Can my university tell if I use AI?

    Sometimes, but not reliably. AI-detection tools can flag likely AI-generated text, and instructors often notice sudden shifts in writing style or fabricated citations, but detection software produces enough false positives that most institutions treat a flag as grounds for review, not automatic proof of misconduct.

    Is it plagiarizing if you use ChatGPT?

    It can be, depending on context and disclosure. Using ChatGPT-generated text without citation or acknowledgement is flagged as plagiarism under most current academic-integrity policies, while properly disclosed and permitted use — for example, brainstorming or editing assistance under a disclosure-with-permission model — typically is not.

    Implications for institutions, publishers, and standards bodies

    For research administrators, the near-term risk is reputational and legal, not just academic: enforcing a misconduct finding on an unreliable detector, against a policy a different department contradicts, is a weak position in an appeal — exactly the scenario the OIA’s casework note describes. Publishers and funders face an adjacent problem downstream, where undisclosed AI assistance in manuscript preparation raises the same coherence question long faced by human-authorship attribution: disclosure only functions as a standard when categories are shared, not improvised per venue.

    CASRAI originated the CRediT contributor role taxonomy in 2014 to solve a structurally similar problem — inconsistent, non-comparable attribution practices across journals. The standard is now stewarded by NISO as ANSI/NISO Z39.104-2022. AI-use disclosure in both teaching and research settings is heading toward the same fork: either a shared taxonomy emerges by deliberate convergence, or institutions continue absorbing the cost of policy fragmentation one appeal at a time.

    Until a sector body publishes a reference taxonomy for AI-use disclosure tiers, institutions should treat internal policy coherence — not a numeric threshold — as the actual compliance target for 2026.

  • AI Act Annex III Education Systems Explained

    Annex III of the EU AI Act (Regulation (EU) 2024/1689) classifies four specific education uses as high-risk: admissions and access decisions, evaluation of learning outcomes, assessment of the appropriate level of education for an individual, and monitoring students for prohibited behaviour during tests. That fourth category covers most commercial exam-proctoring software. Because these systems influence a person’s access to education, providers and institutions face conformity-assessment, documentation and human-oversight duties — and, as of mid-2026, a revised compliance timeline that most procurement guidance has not yet caught up with.

    Annex III is the section of the AI Act that lists the stand-alone use cases treated as high-risk regardless of sector, and education is one of eight listed domains. Under Article 6(2), any system matching an Annex III description is high-risk unless it falls within a narrow set of Article 6(3) exemptions for purely preparatory or narrow procedural tasks.

    What Annex III Actually Classifies as High-Risk in Education

    Annex III, point 3, lists four education and vocational-training use cases. Each is high-risk in its own right, not as a bundled “education AI” category:

    Annex III, point 3 What it covers Typical real-world system
    3(a) Access and admission Determining access, admission, or assignment of people to educational and vocational institutions at any level Admissions-ranking algorithms; automated place-allocation tools
    3(b) Evaluating learning outcomes Assessing outcomes, including where results steer a person’s subsequent learning path Automated essay and short-answer scoring; adaptive-learning placement engines
    3(c) Assessing appropriate education level Determining the level of education a person will receive or can access Streaming and tracking tools; aptitude-based course-eligibility systems
    3(d) Monitoring prohibited behaviour Detecting prohibited conduct by students during tests Remote exam-proctoring software with anomaly or gaze detection

    This structure matters for procurement: a vendor’s product might satisfy only one limb (proctoring under 3(d)) while a different module of the same platform — an automated grading feature, say — separately triggers 3(b). Each function needs its own classification check rather than a single institution-wide judgement.

    Why Proctoring and Admissions AI Meet the High-Risk Threshold

    The AI Act treats education systems as high-risk because their outputs shape a person’s access to opportunity, not because the underlying technology is novel. Recital 56 explains that AI in education can determine “the educational and professional course of a person’s life” and, where biased or opaque, can perpetuate discrimination on grounds such as disability, ethnic origin or sexual orientation.

    Two features push a system firmly into the high-risk tier. First, if the tool performs profiling of natural persons — building a behavioural or performance profile used in a decision — Article 6(3) removes the narrow-task exemptions entirely, so the system is automatically high-risk. Most commercial proctoring tools that flag “suspicious behaviour” patterns over time perform exactly this kind of profiling. Second, where a system’s error directly changes an admission, grading or progression outcome, it cannot credibly claim the “preparatory task only” or “improves a human decision” carve-outs in Article 6(3), because the human reviewer rarely has the practical capacity to re-examine every flagged case in full.

    Conformity-Assessment Duties That Follow

    Classification as high-risk is the trigger, not the end point. Providers placing an Annex III education system on the market must run it through conformity assessment under Article 43 before deployment, and both providers and deploying institutions then carry ongoing obligations:

    • Establish and maintain a risk-management system across the tool’s lifecycle
    • Use training, validation and test data that is relevant, representative and checked for bias
    • Produce technical documentation demonstrating compliance, and enable automatic logging for traceability
    • Complete a declaration of conformity, affix the CE marking, and register the system in the EU high-risk AI database under Article 49
    • Deployers must run a fundamental rights impact assessment before first use, keep human oversight with real override authority, and tell students and applicants that a high-risk system is involved

    None of these duties can be delegated to the software vendor by contract alone. An institution that deploys a high-risk admissions tool is a deployer under the Act and carries deployer-specific obligations even where the vendor, as provider, has already completed its own conformity assessment.

    The compliance timeline itself has shifted since most existing guidance was written. Article 113 originally set 2 August 2026 as the date the Annex III obligations became applicable. On 7 May 2026, the European Parliament and the Council reached a provisional political agreement on the Digital Omnibus on AI, replacing that date with fixed extensions: 2 December 2027 for stand-alone Annex III systems (including education), and 2 August 2028 for Annex I product-embedded systems. Separately, the marking obligations under Article 50(2) now fall due on 2 December 2026. Until the agreed text is formally adopted and published in the Official Journal, the original 2 August 2026 date remains the legally binding one — institutions should treat the extension as highly likely, not yet certain.

    Obligation Original deadline Revised deadline (Digital Omnibus, agreed 7 May 2026)
    Annex III stand-alone high-risk systems (education, employment, essential services) 2 August 2026 2 December 2027
    Annex I product-embedded high-risk systems 2 August 2027 2 August 2028
    Article 50(2) transparency/marking obligations 2 August 2026 2 December 2026

    What This Means for Procurement of Proctoring and Admissions AI

    For institutions and publishers buying exam-proctoring, admissions-ranking or automated-scoring tools, the practical question is no longer “is this AI regulated eventually” but “which Annex III limb applies, and can the vendor prove it.” A procurement checklist built around Annex III should require vendors to confirm, in writing, before contract renewal:

    • Whether each distinct feature of the product (scoring, proctoring, ranking) falls under Annex III, point 3(a)-(d), and if so, which limb
    • Evidence of a completed or in-progress conformity assessment and EU database registration, or a documented Article 6(3) exemption assessment
    • What training data was used, and what bias-testing was performed against protected characteristics
    • What logging and traceability the institution will have access to for its own record-keeping duties as deployer
    • Whether the tool performs any form of profiling, since this removes access to the narrow-task exemptions

    Institutions with any EU touchpoint — joint degrees, EU-based applicants, satellite campuses — should apply the same checklist even where their primary jurisdiction sits outside the EU, because the Act’s extraterritorial scope catches systems whose output is used within the EU.

    Common Questions on Annex III Education Systems

    What Is Considered a High-Risk AI System Under the AI Act?

    An AI system is high-risk if it is a safety component of a product covered by Annex I legislation, or if its use case appears in Annex III — covering biometrics, education, employment, essential services, law enforcement, migration and justice — unless it genuinely poses no significant risk under the narrow Article 6(3) exemptions.

    Which Education Apps Are High-Risk Under the AI Act?

    Annex III, point 3 names four categories: admissions and access tools, learning-outcome evaluation systems, tools assessing a person’s appropriate education level, and software monitoring students for prohibited behaviour in tests. Automated essay scoring and exam proctoring fall squarely within these limbs.

    Can an Exam Proctor Be AI?

    Yes — many institutions already use AI-based remote proctoring that analyses movement, gaze and audio to flag suspected cheating. Under the AI Act, this function sits within Annex III, point 3(d), making the software high-risk and subject to conformity-assessment and human-oversight duties, not a substitute human decision-maker.

    Are Any Education AI Practices Banned Outright, Not Just High-Risk?

    Yes. Since 2 February 2025, Article 5 has banned emotion-recognition systems in educational settings outright, with no research or institutional exemption, except narrow medical or safety uses. This sits above the high-risk tier — a banned practice cannot be brought into compliance through conformity assessment.

    The classification logic behind Annex III will not soften even as its application date moves. Institutions and publishers procuring proctoring, admissions or scoring AI gain a longer runway to 2 December 2027, but the underlying duties — bias-tested data, documented conformity assessment, human override authority, and registration in the EU database — remain the fixed reference point for any system that touches a student’s access to education.