Employees may turn to personal ChatGPT accounts at work even when their employer provides a sanctioned Enterprise workspace. That behavior can expose sensitive company information to systems outside the organization's control, creating a security risk that standard enterprise controls may not cover.
According to guidance from NordLayer, IT administrators need to actively look for signs of personal AI tool usage. This can involve monitoring network traffic for known ChatGPT endpoints and reviewing logs for unusual activity. Once unauthorized use is identified, admins can apply policies to block those connections or restrict data transfers to approved accounts.
The key is to act before data leaves the network. Rather than relying solely on employee training or enterprise workspace adoption, IT teams should implement technical controls that prevent sensitive information from being pasted into personal AI tools. The source does not mention any other approaches, so this represents a single recommended path rather than a consensus view.