AI in the workplace: hidden risks, governance gaps and policy

The risks employers take by letting employees out‑AI them

AI is already being used in workplaces across the UK. In many cases, employees are adopting new tools faster than organisations can govern them.

This shift is redefining productivity, decision-making and risk. While many businesses are still exploring AI implementation, their workforce is already embedding AI into day-to-day work.

The result is a widening gap between how AI is used and how it’s managed.

Download our Future Workspaces report to explore what this means for your organisation.

AI in the workplace: what’s really happening?

How AI is actually being adopted at work

AI at work is rarely introduced in a structured way. More often, it’s being adopted informally by employees as part of their day-to-day work.

This can include:

• Using tools that haven’t been approved
• Making decisions that can’t easily be audited
• Working in ways that aren’t visible to the organisation.

Many organisations consider themselves to be at an early stage of AI adoption but in practice, AI is already embedded in how work is carried out.

This page explores the risks of AI in the workplace, including governance, policy and employee behaviour.

The gap between AI use and oversight

There’s often a disconnect between what organisations believe is happening and what is actually taking place.

This gap doesn’t always create immediate or obvious issues, but risk builds gradually through:

• Unseen or unrecorded usage
• Inconsistent outputs
•  Unclear accountability.

By the time these issues come to light, AI use may already be well established.

Why this matters now

Employees aren’t waiting for AI policy

Limiting or restricting AI use doesn’t prevent adoption. In many cases, it simply means usage happens without visibility.

‘Bring Your Own AI’ is becoming a common pattern. Employees using AI tools without formal approval is no longer unusual and is often underestimated.

AI regulation is changing

Expectations around AI governance are changing. Frameworks such as the EU AI Act point towards increased accountability, transparency and control.

Although the UK approach differs, these developments influence standards and expectations for UK organisations.

Where AI risk arises for employers

The main risk sits in the gap between:

• Adoption and oversight
• Behaviour and governance
• Speed and control.

This is where organisations are most exposed and where risks are often overlooked.

What organisations are missing

We examined how AI in the workforce is actually being used and where organisations are falling behind.

Our findings point to:

• A clear lack of visibility
• Emerging risks that aren’t routinely assessed
• A growing gap between organisations that are responding and those that aren’t.

Download the full Future Workspaces report to understand what’s really happening and what to do next.