Artificial intelligence is embedded in the everyday tasks young workers perform, pressuring businesses to move beyond blanket restrictions and establish clear rules for its use.
AI tools have become part of how many young employees research information, draft documents, analyse data, generate ideas and improve productivity. As their presence in the workforce grows, companies that attempt to completely prevent AI use could face a gap between official policy and what happens in practice.
A 2026 study examining AI use among Generation Z employees found that perceived usefulness was the strongest factor influencing their attitude, intention, and intensity of AI use. The researchers concluded that “perceived usefulness emerged as the strongest driver of attitude, intention, and AI use intensity.”
The findings point to an important challenge for employers. Where workers see AI as useful to their jobs, simply prohibiting its use may not remove the incentive to use it.
Research published in 2025 on what researchers describe as “shadow user innovation” also found that employees are using consumer generative AI tools at work without formal organisational approval. The study notes that “employees increasingly deploy consumer-grade generative AI at work without formal approval.”
For businesses, this can create risks that are harder to identify and manage when AI use takes place outside established company policies.
An employee operating under an approved company AI policy can be trained on what information may be entered into an AI system, which tools are permitted, and where human review is required. An employee who believes AI use is prohibited, however, may resort to personal or unapproved tools without informing the organisation.
That could expose confidential business information, customer data, financial records, internal documents or strategic information to external AI platforms without the company’s knowledge.
The emerging challenge for businesses, therefore, is not simply how to stop employees from using AI but how to ensure that its use takes place within a controlled framework.
Companies will need internal AI blueprints that identify approved tools, establish clear data-protection rules, define tasks where AI can be used, and require human oversight for sensitive decisions and outputs.
Such policies can also require employees to disclose when AI has been used substantially in producing work, while providing training on responsible AI use and information security.
The objective should not be unrestricted access to AI. It should be visible, responsible, and controlled adoption.
Young workers are entering organisations with AI already embedded in how they approach their work. Businesses that recognise this shift and establish clear boundaries can have visibility and control over how the technology is used.
The alternative is a workplace where AI remains officially restricted but continues to operate quietly in the hands of employees, beyond the organisation’s ability to manage the risks.
