Generative AI tools like ChatGPT are now a staple in many people’s workday. Arguably nowhere more so than in a city like Brighton and Hove that’s packed to the rafters with digital savvy forward-thinkers.

And why not? Such tools offer efficiency, creative nudges in the right direction and quick answers (as long as you’re smart enough to sense-check what you’re being told). But, as with everything, there are risks, particularly when it comes to AI data privacy.

As covered on The Register, a recent report by security firm LayerX reveals a worrying trend: employees are copying and pasting sensitive company data directly into AI chatbots. And often without permission or other people in the company even being aware they’re doing it, let alone being comfortable with it.

According to the report:

• Nearly half (45%) of enterprise employees use generative AI tools, with ChatGPT being the most popular by far.
• Over three quarters (77%) of those users copy and paste data into chatbot queries.
• 22% of these pastes include Personally Identifiable Information (PII) or Payment Card Industry (PCI) data.

Perhaps even more concerning, 82% of these AI interactions happen via unmanaged personal accounts that effectively leave businesses blind to what’s being shared.

This creates a massive compliance security gap with potential consequences including regulatory fines, reputational damage and intellectual property loss.

Russell Walker, AJT Managed IT Services Managing Director, warns:

SMEs often operate with lean budgets and teams, making them vulnerable to what are known as ‘shadow IT practices’. Shadow IT practices are when an employee uses software or hardware at work without the knowledge or approval of the business or central IT department. It’s common when teams find a tool – like ChatGPT – that they feel is more convenient or efficient than official IT-sanctioned ones.

Often people are doing it with the best intentions – they’re finding tools that help them do their jobs more effectively. However, what many are unaware of is the fact they could be exposing sensitive data to external platforms. Once shared, this data is no longer within company control. It could be used for model training or accessed by third parties. This in turn can lead to compromised confidentiality, damaged reputation and financial consequences.

As we’ve already established, AI tools aren’t going anywhere. AI is a long-term and ever-evolving fixture of the modern workplace. The best thing local businesses can do is provide a safe way for their employees to get the most out of AI.

At AJT Managed IT Services, we help businesses in Brighton and Sussex stay secure while embracing innovation in their everyday IT.

Secure integrations of AI tools

Implement Microsoft Copilot within your existing secure environment for controlled AI use. No sharing data with unknown third parties.

AI usage policies and security training

Educate your staff with cyber security training to protect your business and meet compliance regulations.

Proactive IT support

From training to dark web monitoring, and from Microsoft 365 licence and tenancy management to ongoing IT support, we’ve got you covered. We can help keep your system secure.

Data loss prevention

Monitor and protect sensitive information across apps and browsers to help protect your data.

Our expertise

With years of experience supporting SMEs in Brighton and beyond, we understand the balance between productivity and security. Whether you need a one-off consultation or a fully managed IT service, our specialists can help you navigate the AI landscape safely.