[ITmedia Business Online] I'm having trouble with an ace employee who "uses external AI without permission"... What should I do?
Quick Look
- Shadow AI (the use of generated AI by employees without permission) has become a social issue.
- Citing an example of a Panasonic Group company uploading the personal information of approximately 330,000 people, the author uses a hypothetical case to explain how companies should respond.
AI-generated summary
Why It Matters
More than four years have passed since ChatGPT was introduced, and ``shadow AI'', which employees use without waiting for companies to establish a system for using generated AI, has become a social issue. A company responsible for the management headquarters of the Panasonic Group announced that it had uploaded data containing the personal information of approximately 330,000 employees and others to a generative AI service that was prohibited from being used.
Author profile: Takuya Furuta X Capital Co., Ltd. 1st class FP technician
Regular member of FP Technician Center. After graduating from Chuo University, he worked at a fintech startup to establish a financial products transaction company and build services for business companies, and then founded an advertising DX company. After working as a Japanese community specialist at the World Foundation, founded by Sam Altman, he joined X Capital Co., Ltd.
More than four years have passed since "ChatGPT" was introduced. "Shadow AI", which is used by employees without waiting for companies to establish a system for using generated AI, has become a social problem. There is no end to incidents such as ``sales staff creating meeting minutes using free generation AI'' and ``sales staff pasting business partner names onto personal accounts.''
In October, a company responsible for the Panasonic Group's administrative headquarters announced that it had uploaded data containing personal information of approximately 330,000 employees and others to a generative AI service that had been prohibited from use. The company says it is not an unauthorized operation by an outsider, but rather a violation of its rules by its members.
Not limited to this case, I'm sure there are few employees who use external AI without permission who turn to shadow AI because they want to be lazy at work. There may be cases where the company's AI is not enough to improve work results.
What should companies do when faced with shadow AI? I will explain this using a hypothetical case as an example, based on the multiple consultations I have received while supporting the introduction of AI.
Q. How should a sales ace who uses external AI rather than in-house AI be treated?
At Company A, a medium-sized parts manufacturer with approximately 400 employees, the two people in charge of the information system were faced with the following problem.
Open Questions
- The specific details of the use of external AI by Company A's sales ace and whether there was any damage
- What specific treatment and rules should companies establish as a countermeasure for shadow AI?
- Detailed history and scope of impact of information leak at Panasonic Group companies

![[ITmedia Business Online] I'm having trouble with an ace employee who "uses external AI without permission"... What should I do?](/api/img?u=https%3A%2F%2Fimage.itmedia.co.jp%2Fbusiness%2Farticles%2F2611%2F09%2Fcover_news038.jpg&w=1200&q=72&f=webp)
![[ITmedia Enterprise] For IT departments who have been told to “do AI security” Don’t aim for 100 points, start by “seeing”](/api/img?u=https%3A%2F%2Fimage.itmedia.co.jp%2Fenterprise%2Farticles%2F2611%2F09%2Fcover_news006.jpg&w=320&q=72&f=webp)
![[ITmedia Mobile] Docomo completes emergency maintenance of ahamo site because "site safety has been confirmed"](/api/img?u=https%3A%2F%2Fimage.itmedia.co.jp%2Fmobile%2Farticles%2F2611%2F08%2Fl_st52693_ahamo-01.jpg&w=320&q=72&f=webp)
![[ITmedia Mobile] Will the tri-fold smartphone “HUAWEI Mate XT 2”, whose folding method has changed from Z-type to G-type, become an “iPhone Duo killer”? When opened, it is 10.2 inches and is also waterproof for the first time](/api/img?u=https%3A%2F%2Fimage.itmedia.co.jp%2Fmobile%2Farticles%2F2611%2F08%2Fcover_news005.jpg&w=320&q=72&f=webp)
![[ITmedia PC USER] “ChatGPT Classic” desktop app will end on January 30, 2027 / Bluetooth SIG announces adoption of new feature “High Data Throughput” Communication speed up to 7.5Mbps](/api/img?u=https%3A%2F%2Fimage.itmedia.co.jp%2Fpcuser%2Farticles%2F2611%2F08%2Fcover_news002.jpg&w=320&q=72&f=webp)
