Secure your small business:
Apps → Data →

Cybersecurity Reference > risks and threats

AI Data Leaks

Quick definition  ⓘ
Why it matters: AI systems like ChatGPT and Bard are more and more integrated into every day work, but this means that the data of everyday work is being sent to AI systems.
4Percent
The proportion of a company's annual revenue that it may be fined as a result of data compliance violations under GDPR.https://gdpr-info.eu/

Key Points

  • AI and generative AI are being used for business work
  • ChatGPT and Bard have accelerated this trend considerably
  • To do business work with AI, business data is sent to AI
  • This results in a significant data leakage risk
  • Compliance failures and training on user data are key risks
© Lane Erickson / Dreamstime

AI can now write sophisticated documents like legal briefs and case file summaries—but in order to do this, it must be provided the relevant confidential data.

Quick Read

AI has been on the horizon for a number of years now, gradually increasing in prominence. In 2023, however, ChatGPT and Bard took the market by storm, becoming some of the fastest-growing applications in computing history as it became clear to users just how significant their skill sets were.

The generative AI chat platforms were quickly put to to work to read and summarize reports, write letters and legal briefs, formulate business plans, analyze and convert data, and provide possible advice on sticky technical problems across a number of fields. They proved surprisingly competent at these tasks, able to take on a wide variety of problems and provide complete or nearly complete solutions, documents, letters, and so on very quickly.

Lost in the furor, however, was the fact that in having AI do this work, users are providing AI systems with the necessary background or source data—the internal documents to summarize, the employee files to use in writing employee evaluations, the medical details in case histories—to complete the requested work. Much of this data is confidential or must not be shared.

In some ways, the relative invisibility of this massive, global data catastrophe results from the unique nature of AI. Users are relatively good at not sharing confidential data with strangers or human parties that aren't authorized to see it. Users have traditionally, however, been far less careful about software; shadow IT has long been a problem for IT teams.

The difference in the case of AI is that AI systems are more like people than like software; they learn and they share. And since they are capable of performing much more complex tasks much more comprehensively, the data provided to them may be of a different quality or quantity than the data used in shadow IT adoptions.

Just as importantly, the shockingly rapid adoption of ChatGPT and Bard caught many companies flat-footed, without sufficient governance or any AI use policy in place. The risks are not small; incidents of AI systems learning from data and revealing this data to other, unrelated users have affected companies as large as Amazon, and in the case of private data governed by standards like GDPR, the consequences for noncompliant data handling can be severe—as large as 4% of annual revenue.

For this reasons, companies are racing to adopt AI governance and to find technical solutions able to prevent the leakage of confidential data to AI as users provide systems like ChatGPT and Bard with AI prompts.

Further Reading

—Aron Hsiao

Need AI Data Leaks solutions?
We can help!

Plurilock offers a full line of industry-leading cybersecurity, technology, and services solutions for business and government.

Talk to us today.

 

Thanks for reaching out! A Plurilock representative will contact you shortly.

What Plurilock Offers
Generative AI Safety and Guardrails for Workforces

More to Know

Every company's employee handbook should feature AI governance policies for enhanced organizational security. © Emiliezhang

AI Governance is Important

Because AI doesn't operate like other software, and presents a unique level of incentive to employees, it is important to have a dedicated AI governance policy in the employee handbook with specific policies, procedures, and consequences related to AI use.

© Rawpixelimages / Dreamstime

Employees Need AI Training

AI data leak risks aren't obvious to many kinds of employees. Training is essential—both to clarify company AI policies and to sensitize employees to the risks inherent in providing many kinds of data to AI, whether specifically governed or not.

Plurilock AI PromptGuard

Use Software Tools for AI Safety

Governance and training are important, but as is the case with other cybersecurity and compliance concerns, software guardrails are important. Tool like Plurilock AI PromptGuard can help to support efforts to prevent confidential data from finding its way to AI systems.

Subscribe to the newsletter for Plurilock and cybersecurity news, articles, and updates.

You're on the list! Keep an eye out for news from Plurilock.