# What should we do when staff use AI tools without understanding the risks?

Start by finding out what is used and why, before writing rules. In most companies the first wave of AI use comes from people solving real problems: drafting e-mails, summarising documents, writing code or translating. A ban drives that use out of sight; an approved tool with clear guidance keeps it visible. Then explain the risks in the terms of people's work: a customer contract pasted into a personal chatbot may break the confidentiality clause; an AI summary can miss the one sentence that matters; generated code can carry vulnerabilities or licence problems. Give a short list of data that never goes into unapproved tools, show how to use the approved one, and name someone to ask. Short, repeated training works better than one long session, and since February 2025 the AI Act requires organisations that use AI to take measures that support their staff's AI literacy. Check progress with facts: from the Pro plan, NetSenX shows which AI services are actually used and how much data goes there.

FAQ: [AI use and AI security](https://netsenx.com/en/faq/ai) · https://netsenx.com/en/faq/what-to-do-when-staff-use-ai-without-understanding-the-risks

## Read next

- https://netsenx.com/en/shadow-ai-detection
- https://netsenx.com/en/ai-transparency

## Related questions

- [How do we check whether staff follow our AI policy?](https://netsenx.com/en/faq/how-to-check-whether-staff-follow-our-ai-policy)
- [Is it safe to upload financial spreadsheets to an AI tool?](https://netsenx.com/en/faq/is-it-safe-to-upload-financial-spreadsheets-to-an-ai-tool)
- [How do I know if employees paste customer data into AI tools?](https://netsenx.com/en/faq/how-do-i-know-if-staff-paste-customer-data-into-ai-tools)
- [Is pasting customer data into ChatGPT a GDPR breach?](https://netsenx.com/en/faq/is-pasting-customer-data-into-chatgpt-a-gdpr-breach)
- [Should employees caught using AI against the rules be fired?](https://netsenx.com/en/faq/should-employees-be-fired-for-using-ai-against-policy)
