Shadow AI: Another element of TPRM
By 
Neil Hodge2025-10-14T20:40:00
Companies may face significant financial and legal risks if they fail to vet suppliers and third parties over their use of unauthorized AI and how the technology may use and share their corporate data.
Experts also believe companies could be at risk of violating data privacy laws if, by using “shadow AI”, their information is passed on by vendors and contractors to train AI models without explicit consent, while potentially sensitive corporate information could be leaked in the process as well.
“The reality is that shadow AI isn’t just inside your four walls anymore. If your governance doesn’t account for your entire ecosystem, you’re flying blind,” said Mike Scott, CISO at data security software firm Immuta.
Related articles
-
PremiumNew EU Data Act may impact companies’ GDPR compliance efforts
New rules that have recently come into effect across the EU will allow for greater transfers of data between companies, though experts fear the changes could conflict with Europe’s strict privacy legislation, which protects personal information.
-
ArticleEmployee use of ‘shadow AI’ poses significant risks for companies
Companies face increased risk of cyberattacks, data loss, and even regulatory action because employees are using unapproved “shadow AI” tools to help with work-related tasks.
-
News BriefAMLA: What difference will the agency make in the EU’s fight against moneylaundering?
Europe’s massive financial sector has become a magnet for illicit money flowing through its banks and markets. A new EU agency will be taking the problem head-on to fight against money laundering.
More from Third Party Risk
-
News BriefBanking regs issue guidance on risks posed by bank-fintech relationships
Three federal banking regulators issued guidance on the risks posed by the use of third-party financial technology firms to deliver bank deposit products and services to customers.
-
PremiumHow fintechs can overcome major compliance hurdles in embedded finance
Margaret Holmes Tibbets, chief compliance officer at financial technology company Pipe, explains how firms are facing an existential compliance crisis, and to survive they’ll need to overcome not one but two hurdles.
-
PremiumBanks must bolster awareness of fintech partner risks, experts advise at Fordham
During a panel at Compliance Week’s Financial Crimes and Regulatory Compliance Summit, held June 10-11 in New York, experts discussed nuances in bank-financial technology partnerships, offering best practices for how banks should protect themselves.