Companies may face significant financial and legal risks if they fail to vet suppliers and third parties over their use of unauthorized AI and how the technology may use and share their corporate data.

Experts also believe companies could be at risk of violating data privacy laws if, by using “shadow AI”, their information is passed on by vendors and contractors to train AI models without explicit consent, while potentially sensitive corporate information could be leaked in the process as well.

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...