When employees use AI tools with private accounts, company data ends up with providers that have no contract. The German Bundestag is responding to this problem not with a ban but with its own chatbot, due to be available by the end of the year. Personal information is made unrecognisable before it is passed to the language model, different models can be integrated, and access is only granted after training.
For companies, the lesson is easy to apply. An official offering has to be at least as convenient as the private account, otherwise it goes unused. Technical filtering belongs in front of the model so that mistakes are caught as well.
We see two points that should also be addressed: a filter for personal data does not recognise trade secrets such as margins, and responsibility for texts that are sent out always remains with people.