Legal Risks from Unauthorized AI Use in the Workplace

Employees in companies are increasingly using unauthorized AI applications, which brings legal risks. Jens Ferner, a specialist lawyer for criminal and IT law, emphasizes that the unauthorized use of such technologies not only violates internal policies but also applicable laws. These developments raise questions about liability and potential consequences that can affect both employees and companies. The use of AI tools without permission can lead to data protection violations. Ferner stresses that many of these applications process personal data, which contradicts the General Data Protection Regulation (GDPR).

Companies that fail to prevent such violations risk hefty fines, which can amount to up to 20 million euros or 4% of their global annual revenue. Another issue is the potential for copyright infringement. Many AI applications generate content that uses copyrighted materials. Ferner warns that employees who use such content without the appropriate licenses can be held legally accountable. This could not only lead to financial damages but also jeopardize the company's reputation.

The legal framework for the use of AI in the workplace has not yet been conclusively clarified. Ferner points out that many companies are not sufficiently informed about the risks. Inadequate training of employees can lead to unintentional violations of laws. Therefore, companies should take proactive measures to educate their employees about the legal aspects of AI usage. Implementing policies for the use of AI applications is essential for companies.

Ferner recommends establishing clear guidelines that enable employees to use AI tools lawfully. Such policies should also include training and regular reviews to ensure that all employees comply with the applicable regulations. Another aspect is liability in the event of damages caused by the use of unauthorized AI applications. Ferner explains that companies can potentially be held responsible for the actions of their employees. This could lead to significant financial burdens, especially if third parties are harmed by the use of such technologies.

The discussion about the legal framework for AI applications is further fueled by the rapid development of technology. Ferner highlights that lawmakers worldwide are working on new regulations to address the challenges of AI usage. Therefore, companies should continuously inform themselves about changes in legislation and adjust their internal policies accordingly. The legal risks associated with unauthorized use of AI applications should not be underestimated. According to Ferner, companies should not only keep an eye on the legal consequences but also consider the ethical implications of AI usage.

A responsible approach to the use of AI can not only avoid legal problems but also strengthen customer trust. The need to address the legal aspects of AI usage will continue to grow in the coming years. Companies are called upon to proactively engage with these issues to minimize legal risks. Ferner estimates that by the end of 2026, about 70% of companies in Germany will have implemented policies for the use of AI applications.