how to talk to companies about AI security, privacy and GDPR There’s one extremely low hanging fruit

So how the hell do I deal with GDPR whenever I give workshops to companies in Europe? Well, obviously Europe, GDPR tends to come up as a general rule. I don't allow it to derail the whole workshop if I only have one hour with the workers. GDPR is not necessarily the best use of that time for them. Generally that will be a chat that will be held offline with the leadership and or IT and legal. There is always one very low hanging fruit though that I make sure that the company knows about. A lot of companies still aren't paying for paid versions of AI for their stuff. So. So in a lot of companies people are still bringing their own AI to work. They are logging into their own personal chatgpt. It's about 74% of professional use is on personal accounts, not on paid professional accounts. At the higher levels of chatgpt you get more data security. If your staff are using free accounts, then that's going into the training data. OpenAI as a really, really basic, low hanging fruit for confidentiality, GPR data privacy. I say to the company, you need to buy your employees chatgpt. Don't expect them to bring it.