BACP Ethical Framework 2026 and AI: what therapists need to know and do
A plain-English guide to what the BACP Ethical Framework 2026 says about AI and digital tools, what it means for your day-to-day practice, and exactly what to do about it.
By Theo Ruby, digital marketing consultant for therapists · Updated 27 October 2026
“Can I actually use AI in my practice, and what do the new BACP rules mean for me?” It’s the question I’m asked most on calls with therapists right now. AI has crept into most practices, from tidying up emails to drafting blog posts and trying AI note-taking apps.
The BACP published its new Ethical Framework on 4 August 2026, and it’s mandatory for all members from midday on Tuesday 3 November 2026. For the first time, it names AI.
I’m not part of the BACP and don’t speak for them. I’m a marketing consultant who has worked with therapists since 2018, and this is my practical reading of the framework, so check anything that affects your registration with the BACP directly.
The short version: the 2026 framework doesn’t ban AI. It asks you to assess the risk of any AI or digital tool before you use it, be honest with clients about how you use it, get informed consent before any client data goes in, and be able to explain your reasoning. For most practices, that’s a few focused hours of work.
BACP Ethical Framework 2026 and AI: a quick guide
If you only have five minutes, read this part: what the BACP Ethical Framework 2026 says about AI and digital tools, the dates that matter, and what to do about them.
When do the new BACP rules start?
- 4 August 2026: framework published, three-month transition starts
- Midday, Tuesday 3 November 2026: framework becomes mandatory for all BACP members
- From then: it applies to every tool you use, including ones you started using before November
What are the five conditions for using AI?
The AI wording sits in core responsibility 2.1(e). Before you use any AI tool, digital tool or online platform, you need to assess the risk and be able to show five things. Start by asking what data the tool will touch, because anything that could identify a client raises the stakes.
1. You’re competent to use the tool
You know what it does, what it gets wrong, and how to check its work.
2. You understand where the data goes
You know how client information is handled and stored, who can see it, how long it’s kept and whether it trains the AI. And you’ve reduced the risks to confidentiality as far as you can.
3. You’re open with clients about it
You tell clients, in plain English, that you use AI or digital tools, including the benefits and the risks.
4. You have informed consent first
You ask before any client’s personal data goes into an AI or digital tool. Personal data means anything that could identify someone, not just their name.
5. You’re still making the decisions
AI can draft, summarise and suggest. You decide, you check its output, and you’re responsible for what you do with it.
What else changes alongside the AI rules?
- Your privacy notice (3.1c and 3.1d) must tell clients about any digital systems, platforms or tools that store or collect their data, and clients need to agree to these limits on confidentiality.
- Your records (3.2c) include all communications, notes and other information about a client, so an AI summary you keep is part of the record.
- Your marketing (1.1b, 1.2a and 1.3d) must be accurate about your services, qualifications and experience, including anything AI drafts for you.
Is there a list of BACP-approved AI tools?
No. The framework doesn’t name, approve or ban any specific tool. If a supplier tells you its product is “BACP approved”, ask them to show you where that comes from.
What do I need to do now?
- List every AI and digital tool that touches your practice, including the ones you use “just for emails”
- Check each one against the five conditions above
- Update your privacy notice to name the digital tools and platforms you use
- Add a plain-English consent line to your working agreement for any tool that handles client data
- Write a short rationale note for each tool, with a review date
- Take your AI use to supervision
- Read the framework yourself, and check anything unclear with the BACP Ethical Framework team at [email protected]
My summary of a 19-page document, checked against the framework on 27 October 2026. Read the full framework yourself, and see BACP’s Preparing for the 2026 Ethical Framework page for videos and resources.
The four ways therapists are already using AI
In practice, AI shows up in therapy work in four places, and each one raises a different question.
1. Session notes and transcription
AI note-taking tools that listen to sessions, and general tools like ChatGPT used to tidy up notes, are the highest-risk use by a distance, because session content is the most sensitive information you hold. If you use one, you need a proper risk assessment, explicit consent from each client, and a tool with contractual guarantees about data. AI can also add details nobody said, so read every note before it’s saved.
2. Admin and emails
Drafting a cancellation policy, rewording an awkward email, or working out a spreadsheet formula. This is low risk and a real time-saver, as long as no client-identifying information goes into the tool.
The moment you paste in a client’s name, email address, or anything that could identify them, you’ve put their personal data into an AI tool and the consent condition applies. Take the details out first and it’s just help with wording.
3. Marketing and website content
Using AI to draft blog posts, social content, or website copy is fine from where I’m sitting, with two cautions. First, review and shape anything published under your name, because your reputation is attached to it, and Google favours content with real expertise behind it (more in my E-E-A-T guide for therapists).
Second, the framework requires your communications to be accurate. AI will happily invent a qualification, an approach you don’t offer, or a statistic nobody can find, so check every claim. The same applies to reviews, covered in what BACP, UKCP, and NCPS say about client testimonials.
4. Clients using AI between sessions
This one is bigger than most therapists realise. Polling for Mental Health UK, published in November 2025, found 37% of UK adults had used an AI chatbot for mental health support, rising to 64% of 25 to 34-year-olds. Most used general tools like ChatGPT.
So some of your clients are probably talking to a chatbot between sessions. The tool conditions don’t apply, because it isn’t your practice using AI, but questions like how to respond when a client says “ChatGPT told me…” are worth taking to supervision.
Can I put client information into ChatGPT?
Not into a free consumer account, no. Free AI tools often use what you type to improve their models, and you have no contract controlling where that data goes. Client information is special category data under UK GDPR, the most sensitive kind, so that would be very hard to defend.
Paid and business-grade tools are different, because many offer settings or contracts that keep your inputs out of training. For anything client-related, the realistic minimum is:
- A paid or business plan, not a free account
- Training on your data switched off, confirmed in writing or in the settings
- A clear answer on where data is stored and for how long
- A data processing agreement, the contract setting out how the supplier handles your data
- A data protection impact assessment if it touches session content (the ICO lists AI used with sensitive data as needing one)
Terms change often, so re-check each tool every few months. If a tool can’t answer the points above clearly, that’s your answer. The ICO’s guidance on AI and data protection covers the legal side.
Do I need to tell clients I use AI?
Yes, if any of their personal data touches an AI or digital tool, and it’s good practice even where it doesn’t. In practice, that means two updates.
Your privacy notice should name the digital and AI tools you use, what data they handle, and where it’s stored. For example:
“I use for online sessions, [booking system] for appointments, and [email provider] for email. These suppliers store data in [location] under data processing agreements. I don’t put your personal information into AI tools without asking you first.”
Your working agreement needs a consent line for any tool that handles client data. A starting point you can adapt:
“I use [tool name] to help me [prepare session notes / manage appointments]. The tool processes [what data] and stores it [where, for how long]. It does not use your information to train AI systems. You can ask me about this at any time, and you can decline without it affecting your therapy.”
Keep it in plain English, because a consent line the client can’t understand isn’t informed consent. Run your final wording past your insurer, your professional body, or a data protection specialist.
What a rationale note looks like
The framework asks you to be able to explain your ethical decisions, but it doesn’t say how to record them. A short, dated note for each tool works well, takes about ten minutes, and can live wherever you keep your practice records. Something like this:
Tool: [Name], AI note-taking assistant.
What it does: Transcribes sessions and drafts summaries for my review.
Data it touches: Session audio, client first names, session content.
Why I judged it safe: Business tier. Training on my data switched off, confirmed by email on 14 August 2026. Data stored in the UK, deleted after 30 days. Data processing agreement in place. Clients consent through my working agreement, and can decline.
What I do with the output: I review and edit every summary before it becomes part of the record. Nothing is filed unread.
Review date: February 2027.
Six lines. If the BACP, an insurer, or a client ever asks why you trusted a tool, this is the answer, dated and on file. Do one for each tool you use, including the low-risk ones.
Not sure your website is ready?
Your privacy notice, contact form, and booking system all come under the new framework. Book a free 30-minute call and I’ll look at your setup and tell you honestly what needs changing.
Frequently asked questions
When does the new BACP Ethical Framework come into force?
It was published on 4 August 2026 and is mandatory from midday on Tuesday 3 November 2026, replacing the 2018 framework. BACP gave members a three-month transition period to read it and adjust their practice.
Does the new framework ban AI?
No. It doesn’t ban any tool. It asks you to assess risk, understand the data, be transparent with clients, get consent before their data goes into a tool, and keep the decisions yours. That’s a bar for thoughtful use, not a prohibition.
I only use AI for marketing, does this affect me?
Less than it affects someone using AI note-takers, but not zero. Keep client data out of the tools, review anything published under your name, and make sure claims about your work are accurate. A line in your privacy notice about the digital tools you use is still sensible.
What about tools I was already using before November?
The framework doesn’t grandfather anything in. If a tool touches your practice after 3 November, the requirements apply to it, whenever you started using it. That’s why the audit step matters.
I’m not with the BACP, does any of this apply to me?
The framework only binds BACP members and registrants, but UK data protection law applies to everyone. COSCA published AI guidelines for counsellors and psychotherapists in July 2026, asking members to build AI into client contracts and review AI-written notes. NCPS is a founding member of the AI Expert Reference Group, which has produced a shared AI charter for the profession.
If you’re with UKCP, BABCP, or another body, check its current position. The five conditions above are a sensible test either way.
Does the framework cover digital tools as well as AI?
Yes. Clause 2.1(e) covers any AI tool, digital tool or online platform, so read plainly it takes in your video platform, notes system, and booking system, not just chatbots. BACP says further resources are on the way.
Can I use an AI note-taker in my sessions?
The framework doesn’t ban it, but it’s the highest-risk use of AI in practice. You’d need everything in the checklist under “Can I put client information into ChatGPT?”, informed consent from each client, and a habit of reading every note before it’s saved.
Do I need to say when AI helped write a blog post?
The framework doesn’t require a label, but it does require accuracy, so check every claim AI makes for you. Google’s guidance says explaining how content was made helps where readers might wonder.
Does the framework apply to supervisors, trainers, and coaches?
Yes. It applies to all BACP members, including counsellors, psychotherapists, and coaches at every membership level, as well as supervisors, trainers, and members who use counselling skills in their work. If you supervise or train, the AI conditions apply to that work too.
The bottom line
The 2026 framework treats AI the way it treats everything else in practice: with honesty, competence, and the client’s interests first. It isn’t anti-AI, and getting your practice in line is a few focused hours, not a crisis.
Use this guide as a starting point, then read the framework itself and check anything about your registration with the BACP.
Need help with the website side of this?
If the part nagging at you is your privacy notice or your website’s trust pages, that’s where I can help. I work only with therapists, counsellors, and mental health professionals on website design and SEO, and I’ll tell you honestly whether it’s a job you can do yourself.
Written by Theo Ruby, a digital marketing consultant who has worked in marketing since 2008 and with therapists, counsellors, and mental health professionals since 2018. He has helped hundreds of UK practitioners with their websites and SEO, and has spoken to groups including Grow Your Private Practice and Counsellors’ Staffroom. Theo isn’t affiliated with the BACP, and this is general guidance, not legal or ethical advice.
Get in touch: www.theoruby.com/contact
Email: [email protected] | Phone: 07709 852 364