Securing sensitive data in the AI era

This article explains shadow AI—unsanctioned use of AI tools at work—and how it appears in development teams, noting that client code and personal data carry extra contractual and GDPR obligations. It offers practical mitigations: approved business-plan tools, a shared model gateway, sending less data, pseudonymization, IDE file exclusions, local models, and agreeing AI rules with clients at kick-off. It also covers incident response and stresses rewarding reporting rather than punishing it.