Short answer
It can be safe if you use business-grade AI services or your own solution where data isn’t used to train models, there is a clear data processing agreement and access rights are limited. Entering personal data or trade secrets into free accounts is not recommended.
The main risks
- Data used for training — in some consumer plans, the data you enter may be used to improve the model.
- Personal data — customer and employee data must comply with the GDPR.
- Access rights — AI must not show information to a person it isn’t meant for.
- Actions in systems — if an AI agent has overly broad permissions, its actions can have unwanted consequences.
How to use AI safely
- Business-grade services with a contract that prohibits using your data for training.
- Where data is processed — in the EU where possible.
- Least privilege — AI accesses only what it needs.
- Minimise personal data — anonymise it where you can.
- Logs and control — you can see what the AI has done.
- Rules for employees — what may and may not be entered into AI tools.
The law
In addition to the GDPR, companies must take into account the EU Artificial Intelligence Act, which among other things requires that employees working with AI understand its capabilities and risks.