Employees using personal ChatGPT at work? Here's what IT admins need to do

The use of personal ChatGPT accounts by employees in a workplace environment poses a risk of sensitive company data leakage. Despite the availability of an approved Enterprise workspace, employees may bypass it and use personal accounts, which are not subject to organizational controls. This situation requires IT teams to monitor and block unauthorized AI usage to protect corporate data confidentiality.

Sensitive company data may be inadvertently or deliberately exposed through personal ChatGPT accounts, bypassing organizational security controls. This can lead to data leakage risks and potential compliance issues, although no specific exploits or active attacks are reported.

IT administrators should investigate the use of unauthorized personal AI accounts within their networks and implement policies or technical controls to block or restrict access to personal ChatGPT accounts. Organizations should encourage or enforce the use of approved Enterprise AI workspaces to ensure data protection. Since this is a usage and policy issue rather than a software vulnerability, no patches are applicable.