Ling-yi Tsai is a veteran of the HRTech landscape, having spent decades guiding major organizations through the choppy waters of digital transformation. Her expertise sits at the intersection of human psychology and advanced analytics, focusing on how technology can streamline recruitment and talent management without losing the human touch. As companies grapple with the sudden explosion of generative tools, she has become a leading voice on how to integrate these systems responsibly. Today, she joins us to discuss the growing disconnect between employee enthusiasm for innovation and the formal structures meant to govern it.
The conversation centers on the “Bring Your Own AI” phenomenon, where a vast majority of workers are adopting external tools in a vacuum of corporate guidance. We explore the serious security implications of sharing confidential data with public systems and the administrative blind spots that occur when human resources departments are left out of the strategic loop. Finally, the discussion moves toward the necessity of a national framework and the failure of restrictive bans in a modern, fast-paced work environment.
With over three-quarters of the workforce now bringing their own AI tools into their daily workflows, what does this tell us about the current gap in corporate training and oversight?
It highlights a tangible sense of urgency among employees who feel they must innovate to keep up, even if their employers aren’t providing the ladder. When you look at the fact that 76% of workers are sourcing their own AI tools, it becomes clear that the workforce is moving much faster than the boardroom. This “Bring Your Own AI” or BYOAI trend is a direct reaction to the 41% of workers who report receiving absolutely no tools, training, or guidance from their companies. These individuals aren’t trying to be rebellious; they are simply trying to be efficient in a world that increasingly demands high-speed output. Unfortunately, without role-specific direction—which only 21% of employees currently have—we are seeing a digital Wild West where the responsibility for safety is unfairly shifted onto the individual.
As these unsanctioned tools become common, we are seeing a spike in security incidents. How are employees inadvertently putting sensitive company information at risk?
The danger is often invisible to the user, but the data shows it is very real, with 52% of businesses experiencing an AI-related security incident or a close call in just the past year. Employees often view these public AI interfaces as private assistants, but in reality, they are feeding confidential records into outside systems that lack corporate oversight. For instance, roughly 43% of office professionals have entered work correspondence into public tools, and about a third have gone as far as sharing sensitive customer or financial data. When workers upload internal employee records or proprietary financial spreadsheets, they are essentially handing over the “keys to the kingdom” to a system they don’t control. It’s a terrifying scenario for compliance teams because you cannot govern or protect data that is flowing through tools you don’t even know are being used.
It is surprising to see that HR is often excluded from AI strategy. What are the long-term consequences of leaving the “people” experts out of these high-level technology decisions?
It is a significant strategic oversight that 52% of organizations do not involve HR directly or collaboratively in their overall AI strategy. HR professionals are the ones who understand the nuances of the workforce, yet 57% of those working in states with AI employment laws aren’t even aware those specific regulations exist. When legal and compliance teams lead AI governance in a vacuum, the human element of talent management and onboarding gets lost. This exclusion creates a massive disconnect where the people responsible for hiring and managing talent are operating without the tools or the knowledge necessary to protect the organization from bias or legal liability. Without HR at the table, the AI strategy becomes a technical checklist rather than a holistic plan that considers the employee experience and evolving labor laws.
Many organizations have considered or implemented outright bans on AI tools to mitigate risk. Why do you believe these bans are failing to stop the trend?
Banning a transformative technology is like trying to hold back the tide with a broom; it only forces the behavior underground and out of sight. When employers implement strict bans, they don’t actually stop the use of AI; they simply drive 52% of workers to use unapproved tools in secret, making it impossible for security teams to monitor the flow of information. This creates a “shadow AI” environment where the risks of data leakage increase because there is no safe, sanctioned sandbox for experimentation. Instead of prohibition, organizations need to implement identity-centric controls and automated discovery to see what tools are being used. Providing a secure environment for testing AI tools is the only way to satisfy the workers’ need for efficiency while maintaining the security and compliance that the business requires.
What is your forecast for AI governance in the workplace?
I believe we are heading toward a necessary consolidation of rules, likely moving away from the current state-by-state patchwork toward a single national framework. As organizations realize that 52% of their staff are already using these tools without permission, there will be a massive shift in investment toward comprehensive workforce training rather than just software procurement. We will see the rise of “secure sandboxes” where the 19% of workers who currently get dedicated training will become the new standard, ensuring that AI is a collaborative partner rather than a hidden risk. Ultimately, HR will have to step into a leadership role to bridge the gap between technical compliance and the actual daily habits of the workforce to ensure that AI adoption is both safe and productive.