Shadow AI

People adopt AI tools far faster than any organisation can evaluate them, so confidential material ends up in services nobody has checked.

Banning it outright reliably fails. It does not stop the behaviour, it just moves it onto personal accounts and personal phones where you cannot see it at all, which is strictly worse. The organisations handling this well provide something approved and good enough to be worth using, then find out what people actually need. Prohibition without a sanctioned alternative is a policy that produces invisible risk rather than less risk.