Procurement Act 2023 & AI Clauses Made Simple

Procurement Act 2023 & AI Clauses Made Simple:
The Plain‑English Playbook for Businesses

Name: Procurement Act 2023 and AI Clauses Made Simple: The Plain-English Playbook for Businesses
Author: Kateule Sydney

Category: Procurement & AI Law · Format: Business Playbook · Status: Complete (4 Chapters)

Author: Kateule Sydney
Published: 2026/04/08
Last Updated:

A 4‑chapter explainer for managers, founders, and in‑house teams who buy technology or sell to the public sector. Learn how the UK Procurement Act 2023 changes bidding, risk, and contracts – and how to draft AI clauses that protect your business. No legal jargon, just plain‑English guidance with templates and checklists.

Playbook Overview

Subject: Procurement Act 2023, AI contract clauses, public procurement, risk management
Level: Beginner to Intermediate – for non‑lawyers
Target Roles: Business owners, procurement managers, in‑house counsel, compliance officers, sales teams
Learning Style: Plain‑English explanations + Real case studies + Checklists + Sample clauses
Chapters: 4 complete chapters
Language: English (global applicability, with UK focus)

Learning Outcomes

Understand the key changes introduced by the Procurement Act 2023 (in force February 2025).
Assess how the Act affects bidding, debarment risk, payment terms, and contract modifications.
Draft a robust AI clause with 7 essential parts – tailored for public sector or commercial contracts.
Apply negotiation strategies and identify red flags when suppliers use AI.
Use sample clauses and checklists to protect your organisation from AI‑related liability.

Who This Playbook Is For

This playbook is for business owners, procurement managers, in‑house legal teams, compliance officers, and sales professionals who respond to public sector tenders (UK or organisations following similar standards) or who buy AI‑enabled services. It is also valuable for NGOs, aid‑funded projects, and suppliers outside the UK that bid for UK‑funded contracts. No prior legal training is required.

Playbook Structure

Chapter 1 explains the Procurement Act 2023 in plain English – what changed, the new principles, procedures, transparency rules, and tougher exclusion grounds.

Chapter 2 shows how the Act changes bidding, risk, and contract management for both buyers and suppliers, including debarment lists, payment terms, and variation thresholds.

Chapter 3 provides a 7‑part framework for drafting AI clauses that comply with the Act and general commercial law – with definitions, permitted use, human oversight, data rules, transparency, IP, and liability.

Chapter 4 puts it together with sample clauses, a public‑sector add‑on, negotiation tips, and red flags to avoid.

Why Study This Topic?

The Procurement Act 2023 is now in force (from 24 February 2025) – it applies to billions of pounds of public spending.
Non‑compliance can lead to debarment (exclusion from bidding for 3‑5 years) and reputational damage.
AI use in procurement and contract delivery is exploding – but most contracts have no AI clause, leaving huge liability gaps.
Generic “AI may be used” clauses are dangerous – they do not address data protection, IP ownership, or hallucination risks.
Suppliers outside the UK (including in Zambia, Africa, and Asia) often bid for UK‑funded projects – the Act applies to them too.

All Characters (Key Stakeholders in This Playbook)

The Public Buyer: UK contracting authority (central government, local council, NHS, etc.) running procurements under the Act.
The Supplier (Prime Contractor): Business bidding for public contracts or selling AI‑enabled services.
The Subcontractor: Lower‑tier supplier – now has direct protection under 30‑day payment terms and can report late payment.
The Procurement Lawyer: Advises on compliance, debarment, and AI clause drafting.
The AI Provider: Company supplying generative AI, LLMs, or automated decision‑making tools.
The Compliance Officer: Ensures modern slavery statements, carbon data, and supply chain transparency are in order.
The In‑House Counsel: Reviews and negotiates AI clauses, indemnities, and liability caps.
The NGO/Funder: Organisation that adopts Procurement Act standards for aid‑funded projects (e.g., FCDO, World Bank).

Chapter 1: Procurement Act 2023 in Plain English – What Actually Changed?
Chapter 2: How It Changes Bidding, Risk, and Contracts
Chapter 3: How to Draft an AI Clause – The 7 Parts You Cannot Skip
Chapter 4: Put It Together – Sample Clauses and Negotiation Tips

Start Mastering Procurement & AI Clauses

Begin with Chapter 1 to understand the Procurement Act 2023, then move through bidding risks, AI clause drafting, and sample templates.

Start Chapter 1 →

Frequently Asked Questions

Does the Procurement Act 2023 apply outside the UK?

It applies to UK public contracts. However, many international NGOs, aid agencies, and private companies copy its standards. If you bid for UK‑funded projects, you will need to comply even if you are based elsewhere.

Do I need a lawyer to use the AI clause templates?

The templates are a starting point. For high‑value or high‑risk contracts, you should have a qualified lawyer review them. This playbook is educational, not legal advice.

What is the debarment list and how do I check it?

The debarment list is a public register of suppliers excluded from UK public contracts. You can search it on the central digital platform. Check it before bidding and for your subcontractors.

Can a supplier refuse to sign an AI clause?

Yes, but that is a red flag. If they cannot commit to basic transparency and liability, consider alternative suppliers.

Is this playbook updated for 2026?

Yes. The Act came into force on 24 February 2025, so it is fully live now. The AI clause guidance reflects current legal and commercial standards.

Chapter 1 — Procurement Act 2023 in Plain English: What Actually Changed?

Estimated Reading Time: 25 minutes

The big idea: The United Kingdom has replaced hundreds of complex, EU‑derived procurement rules with one simpler, more transparent law. The Procurement Act 2023 came into force on 24 February 2025 – so it is fully live now in 2026. It applies to public contracts in England, Wales, and Northern Ireland. Scotland has its own regime, but many Scottish authorities align with the Act.

If you are a supplier anywhere in the world (including Zambia, Kenya, India, or elsewhere) bidding for UK‑funded projects, aid‑funded programmes, or even large private sector contracts that copy public standards – this Act now affects you.

1.1 One Set of Rules, Not Three

Before the Act, procurement was split into separate regimes for goods, services, and works – each with different rules, thresholds, and procedures. That caused confusion, inefficiency, and legal traps. Now: A single, unified rulebook applies to all public contracts. That means less bureaucracy for buyers and a more level playing field for suppliers.

1.2 Principles Over Process

The Act shifts from rigid, prescriptive processes to high‑level principles that contracting authorities must follow:

Value for money – not just the lowest price, but the best overall outcome.
Maximising public benefit – including social value, environmental impact, and innovation.
Sharing information – transparency is now mandatory, not optional.
Integrity – suppliers with poor performance history can be excluded.

In practice, this means a bid that offers a slightly higher price but better social value (e.g., employing local apprentices) can win over a cheaper bid with no added benefit.

1.3 New Procedures: Open and Competitive Flexible

The old terminology (“open procedure,” “restricted procedure,” “competitive dialogue,” “competitive procedure with negotiation”) has been streamlined.

Open procedure – still exists: anyone can bid, no shortlisting.
Competitive flexible procedure – a new, flexible tool where the buyer designs the stages. They can run a multi‑stage dialogue, ask for pilots, invite iterative bids, or phase the award. This is great for innovation (e.g., buying AI software, research services, or complex infrastructure). However, if you are a supplier and you do not read the tender carefully, you might miss a critical stage – the buyer can change the rules between stages.

Example: A local council wants to buy a new benefits assessment system. They run a competitive flexible procedure with three stages: (1) written technical proposals, (2) a live demo of the software, (3) an interview with end‑users. The council can eliminate suppliers at each stage.

1.4 Everything Is Published on a Central Platform

All procurement notices must go on the central digital platform, which replaces the old Find a Tender service (FTS) and OJEU/TED. Published notices include:

Pipeline notices – what the authority plans to buy in the next 18 months. Suppliers can prepare early.
Tender notices – the call for competition.
Award notices – who won and why.
Contract change notices – any modification over £5 million (goods/services) or certain thresholds.

This transparency means competitors can see your contract terms, prices, and modifications. It also means you can challenge a decision more easily because you have more data.

1.5 Exclusions Are Tougher: Poor Performance Now Counts

Previously, a supplier could only be excluded for serious crimes (fraud, corruption, terrorism). Under the Act, poor performance is also grounds for exclusion. The authority can consider:

Past contract terminations for default.
Repeated failure to meet KPIs (e.g., consistently late delivery).
Modern slavery breaches.
Serious professional misconduct.

There is also a new debarment list – a public register of suppliers excluded from public contracts. Exclusion can last 3 to 5 years, and it applies across all UK public authorities.

Case study (real‑world analogue): A cleaning services supplier was terminated from a school contract after failing to provide required training records. Under the old rules, they could still bid for other public contracts. Under the new Act, they could be added to the debarment list and lose access to all public procurement for several years.

1.6 Why It Matters to Suppliers Outside the UK

If you are a business in Zambia, Africa, or anywhere else bidding for UK aid‑funded projects (e.g., FCDO, British Council, GIZ projects that follow UK standards), you now need to provide:

Performance history – evidence of on‑time delivery for the last 3 years.
ESG data – a modern slavery statement, carbon footprint, and social value commitments.
Supply chain transparency – a map of your subcontractors, because they are also checked.

Practical tip: Even if you never bid for a UK public contract, many large private companies (especially those that supply the UK government) now flow down these requirements to their subcontractors. So you may still need to comply.

Practice Questions – Chapter 1

What is the key difference between the old procurement rules and the new Act’s approach to procedures?
Name two new grounds for excluding a supplier under the Act that did not exist before.
Why is the “competitive flexible procedure” both an opportunity and a risk for suppliers?
A Zambian IT company wants to bid for a UK‑funded aid project. What three types of information will they likely need to provide about their past performance?

Keywords: Procurement Act 2023, competitive flexible procedure, debarment, central digital platform, transparency, value for money

Chapter 2 — How It Changes Bidding, Risk, and Contracts

Estimated Reading Time: 25 minutes

This chapter is for both buyers (public sector or private companies copying the Act) and suppliers. It focuses on practical changes to the bidding process, contract management, and risk allocation.

2.1 For Buyers: What You Must Do Differently

A. Plan early and publish a pipeline notice
The Act requires authorities to publish a notice of planned procurements at least 18 months in advance (or as soon as practicable). This gives the market time to prepare, partner, or innovate. Failure to publish can be challenged.

B. Use the competitive flexible procedure correctly
If you design a multi‑stage process, you must set out the rules clearly in the tender documents. You cannot change the rules after the procedure starts without good reason – and you must publish the changes. Keep a clear audit trail.

C. Score on Most Advantageous Tender (MAT), not lowest price
You must evaluate tenders based on MAT – a combination of price, quality, social value, and delivery risk. You can weight factors as you wish, but you must publish the weightings. A typical MAT might be 60% quality / 40% price, or 80% social value / 20% price.

Example: A council buys IT support. One bidder offers £1 million but includes free training for 100 local students. Another offers £900,000 with no added value. The higher‑priced bid may win if the council values social benefit.

D. Manage modifications carefully
If you change a contract after award, you must publish a notice for changes exceeding:

10% of the contract value for goods or services.
15% for works.

No more “quiet scope creep” – every significant change is public.

2.2 For Suppliers: New Risks and Protections

A. Debarment risk is real
The debarment list is public and searchable. A single bad delivery (e.g., missing KPIs for 6 months) can lead to exclusion for 3 years. You lose the ability to bid for any UK public contract during that time – not just with that authority.
What to do: Track your KPIs obsessively. Keep evidence of delivery, customer satisfaction, and any remediation. If you receive a poor performance notice, respond immediately and document your corrective actions.

B. 30‑day payment terms down the supply chain
The Act implies a 30‑day payment term from the prime contractor to all subcontractors (unless the contract states otherwise). Subcontractors can now report late payment directly to the authority, and the authority can withhold payment from the prime contractor. This gives small suppliers real leverage.

C. Contract variations are now public
If the authority asks for a variation that exceeds the threshold (10% or 15%), they must publish a notice. This means your competitors can see that you changed scope – which could be commercially sensitive. Negotiate confidentiality protections where possible.

D. Challenge window: 8 working days (but easier)
The standstill period (between award notice and contract signature) is 8 working days. However, because much more data is published (evaluation scores, reasons for exclusions, etc.), suppliers have more grounds to challenge. If you suspect a breach, act quickly.

2.3 Plain‑English Checklist Before You Bid

Before you submit any bid, verify:

☐ Can you prove 3 years of on‑time delivery for similar contracts? (Keep delivery confirmations, signed acceptance forms, and performance reports.)
☐ Do you have a modern slavery statement (required for contracts over £5 million, but many authorities ask for it anyway)?
☐ Have you measured your carbon footprint for the relevant activities? The authority may ask for a carbon reduction plan.
☐ Have you mapped your subcontractors? You need to know who they are and ensure they also comply (e.g., no modern slavery, no sanctions).
☐ Have you reviewed the debarment list to ensure you are not named (and that your subcontractors are not named)?

2.4 Case Study: A Small Construction Firm

A family‑owned construction firm in Wales bids for a school renovation contract worth £2 million. They have excellent delivery records but have never published a modern slavery statement. They rush to draft one, but it is generic and not signed by a director. The authority rejects their bid as non‑compliant.
Lesson: Prepare these documents before you need them. A modern slavery statement, carbon reduction plan, and subcontractor map should be ready as standard business documents.

Practice Questions – Chapter 2

What is the Most Advantageous Tender (MAT) and how does it differ from “lowest price”?
A supplier is late on deliveries for 4 months. Under the Act, what is the possible consequence?
Why is the 30‑day payment term a protection for subcontractors? How can a subcontractor enforce it?
List three things you should check before submitting a bid under the Procurement Act 2023.

Keywords: MAT, debarment list, 30‑day payment terms, variation threshold, standstill period

Chapter 3 — How to Draft an AI Clause: The 7 Parts You Cannot Skip

Estimated Reading Time: 30 minutes

Many contracts now include generic phrases like “the Supplier may use artificial intelligence.” That is dangerous – it does not address data protection, intellectual property, liability for errors, or transparency. Under the Procurement Act’s transparency duty and general commercial law, you need a specific, enforceable AI clause.

This chapter gives you a 7‑part structure for drafting AI clauses. You can adapt it for services contracts, software agreements, or public procurement.

3.1 Part 1 – Definition of AI System

Do not just say “AI.” Define it precisely.

Example: “AI System means any software or system that uses machine learning, generative models, natural language processing, or automated decision‑making to analyse data, generate content, or perform tasks under this Contract. This includes but is not limited to large language models (e.g., GPT‑4, Gemini, Claude), image generators, predictive algorithms, and robotic process automation with adaptive learning.”

Why it matters: If you do not define AI, the supplier could claim that a simple if‑then rule is not AI – or that a future, more powerful AI is excluded.

3.2 Part 2 – Permitted Use

Specify exactly what the supplier may (and may not) do with AI.

Example: “The Supplier may use AI Systems only for the following purposes: (a) drafting internal working papers, (b) summarising publicly available research, (c) translating non‑confidential documents. The Supplier may not use AI for: (a) making eligibility or scoring decisions, (b) processing personal data without explicit consent, (c) generating final deliverables without human review.”

Why it matters: Without limits, the supplier might use AI to make automated decisions that affect your customers – without your knowledge.

3.3 Part 3 – Human Oversight

Every AI output must be reviewed by a qualified human. The supplier remains fully liable for errors – they cannot blame the AI.

Example: “A human with subject‑matter expertise shall review all AI‑generated outputs before they are submitted to the Client. The Supplier retains full responsibility and liability for any errors, omissions, or biases in AI‑generated content, and no ‘AI hallucination’ or model limitation shall excuse non‑performance.”

Why it matters: Courts are increasingly rejecting “the AI made a mistake” as a defence. This clause makes that explicit.

3.4 Part 4 – Data Rules

AI models are often trained on public data. You must protect your confidential information and ensure compliance with data protection laws.

Example – three sub‑clauses:

(a) “The Supplier shall not input any of the Client’s confidential, proprietary, or personal data into any publicly available AI model (including free or open‑source models) unless the Client gives written approval.”
(b) “Any training data used to fine‑tune AI Systems for this Contract shall comply with UK GDPR, the Data Protection Act 2018, and all applicable intellectual property laws. The Supplier warrants that it has the right to use all training data.”
(c) “Data processed by AI Systems under this Contract shall remain within the UK or European Economic Area unless the Client agrees otherwise in writing.”

Why it matters: If a supplier uses your confidential business plan to train a public model (like ChatGPT), that data could be exposed to other users. This clause prevents that.

3.5 Part 5 – Transparency and Audit

The Procurement Act requires transparency. This clause operationalises it.

Example: “The Supplier shall maintain audit logs of all AI System usage under this Contract, including: (a) which AI tools were used, (b) the input prompts or data, (c) the outputs generated, and (d) the name of the human reviewer. Such logs shall be retained for 6 years and provided to the Client within 10 business days of request.”

Why it matters: If a dispute arises (e.g., AI‑generated report contains false information), you need the evidence to prove what happened.

3.6 Part 6 – Intellectual Property and Output Ownership

AI‑generated content raises novel IP issues. In many jurisdictions, AI‑generated works have no copyright owner. This clause assigns ownership contractually.

Example: “All deliverables created by the Supplier (whether using AI or not) are owned by the Client upon final acceptance. The Supplier warrants that it has the legal right to use any AI‑generated content included in deliverables. The Supplier shall indemnify the Client against any third‑party claim that AI‑generated content infringes copyright, trade mark, or other intellectual property rights.”

Why it matters: If an AI model was trained on copyrighted material, the output could be an infringement. The indemnity protects you.

3.7 Part 7 – Performance and Liability

AI does not reduce service levels. The supplier remains liable for bias, hallucinations, or non‑compliance. Insurance must cover AI risks.

Example: “Use of AI Systems does not reduce the Supplier’s service levels, performance guarantees, or liability under this Contract. The Supplier is liable for any harm caused by algorithmic bias, hallucination, incorrect outputs, or non‑compliance with law. The Supplier shall maintain professional indemnity insurance with minimum cover of £2 million per claim, specifically including coverage for AI‑related claims.”

Why it matters: Many standard insurance policies exclude AI‑related claims. This clause forces the supplier to have appropriate cover.

3.8 Bonus for Public Procurement

If your contract is subject to the Procurement Act 2023, add this:

“The Supplier shall demonstrate, upon request, how its use of AI Systems contributes to value for money, public benefit, or innovation – consistent with the Procurement Act 2023’s principles. Failure to provide such evidence may be treated as a KPI breach.”

Practice Questions – Chapter 3

Why is a generic “AI may be used” clause dangerous? Give two specific risks.
Draft a short definition of “AI System” that excludes simple if‑then rule‑based software.
What is the purpose of the “no client confidential data trains public models” sub‑clause?
Why does the supplier need to indemnify the client for AI‑generated IP infringement?
What insurance requirement should you include for AI use?

Keywords: AI clause, hallucination, indemnity, audit logs, model cards, human oversight

Chapter 4 — Put It Together: Sample Clauses and Negotiation Tips

Estimated Reading Time: 20 minutes

This chapter provides ready‑to‑use templates, negotiation strategies, and red flags.

4.1 Sample Short Clause for a Services Contract

Use this for low‑risk, internal AI use (e.g., drafting emails, summarising documents):

“The Supplier may use AI tools solely to assist internal drafting. All outputs are reviewed by a human expert before submission. The Supplier will not input the Client’s personal or confidential data into any publicly trained model. The Supplier warrants lawful use of training data, owns or licenses all necessary IP rights, and indemnifies the Client against claims arising from AI‑generated content. Use of AI does not limit the Supplier’s liability under this Agreement.”

4.2 Sample Public‑Sector Add‑On

Add this to any contract subject to the Procurement Act 2023:

“In line with the Procurement Act 2023, the Supplier shall publish in its monthly report: (a) which AI systems were used, (b) time saved or quality improvement achieved, and (c) any incidents of bias or error and remediation. Failure to provide this data is a KPI breach.”

4.3 Negotiation Tips

For buyers (clients):

Do not accept a clause that says “Supplier may use AI at its discretion.” You need limits.
Ask for the AI risk register and model cards (documentation of how the AI was trained, tested, and what biases were found). Do not just rely on the legal clause.
Push for the right to audit AI logs once per year, with 10 days’ notice.

For suppliers (service providers):

Push back on unlimited indemnities – cap at 12 months of fees, except for data breaches or IP infringement (which are harder to cap).
Ensure your insurance policy explicitly covers AI‑related claims. Many policies exclude “generative AI” or “machine learning” unless added.
If you use open‑source models, disclose which ones and what licence they use (e.g., MIT, Apache, or restrictive licences like AGPL).

For both parties:

Agree on a definition of “hallucination” – a plausible‑sounding but incorrect output. Specify that repeated hallucinations are a service level breach.
Decide who pays for AI subscription fees (e.g., ChatGPT Enterprise). If the client wants the supplier to use a specific tool, the client may need to provide a licence.

4.4 Red Flags – Walk Away from These

If the supplier says any of the following, reconsider the deal:

“We use AI but can’t tell you which model.” – You cannot assess risk without knowing the tool.
“No human review needed – the AI is 99% accurate.” – Even 1% error on high‑volume tasks is unacceptable without oversight.
“We are not liable for AI errors – the AI provider’s terms say so.” – That is a breach of the contract; the supplier is always responsible.
“We train models on all client data to improve performance.” – Without explicit consent and data protection safeguards, this is likely illegal under GDPR.

4.5 Case Study: AI Clause in Action

A marketing agency used a generic “AI may be used” clause with a retail client. The agency fed the client’s confidential sales data into a public AI model to generate ad copy. That model later reproduced the sales data in responses to other users. The client suffered a data breach. The court found the agency liable for breach of confidence and data protection law – and because the contract had no specific AI clause, the agency could not rely on any exclusion.
Lesson: A generic clause protects no one. Use the 7‑part framework.

Practice Questions – Chapter 4

Write a short AI clause for a low‑risk consultancy contract.
As a buyer, what two documents should you ask for beyond the legal clause?
As a supplier, what is a reasonable cap on indemnity for AI errors?
List three red‑flag statements from a supplier regarding AI use.
Why is “the AI provider’s terms say they are not liable” not an acceptable defence for the supplier?

Keywords: sample clause, model card, indemnity cap, hallucination, red flags

📚 References

The following resources provide additional information on topics covered in this playbook:

✨ Complete 4‑chapter procurement & AI playbook – from the Procurement Act 2023 to AI clause drafting and negotiation.
Author: Kateule Sydney. Updated:

This playbook is for educational purposes only and does not constitute legal advice. Consult a qualified lawyer for your specific contracts and jurisdiction.

E-cyclopedia Resources

Featured

Customs and Clearing Cross-Border Playbook (2026)