In my last post, I talked about chatbots as the easiest place to start with AI. They're accessible, easy to adopt, and can deliver immediate productivity gains when used well. However, those same qualities are also what make chatbots risky when they're used carelessly or scaled across an organization without clear expectations.

This isn't an argument against chatbots, but rather is about understanding where employee's use of chatbots can expose the organization to risk.

Here are some of the most common pitfalls I see:

Data privacy and confidentiality
Employees routinely paste highly sensitive information into public tools without realizing where that data may go or how it might be used. Without guidance, people make their own judgment calls, and those don't always align with organizational risk tolerance.

Confidently wrong answers
Chatbots are designed to sound authoritative. They can (and do!) fabricate details, provide outdated information, or give answers that are correct in one jurisdiction but wrong in another. Treating AI output as trusted instead of as a starting point is a common mistake and can lead to compliance issues or reputational damage.

Bias
AI models reflect the data they're trained on. In areas like HR, policy language, or customer communication, even subtle bias or framing can create real problems if left unchecked.

Loss of authenticity
An over-reliance on AI-generated text leads to a communication style that is readily identifiable. When AI-generated text is used without editing or judgment, it can erode trust in your messaging. There's also a longer-term risk: over-reliance on AI can quietly erode critical thinking and writing skills if it replaces judgment instead of supporting it.

Shadow AI
Let's be realistic: Employees will use AI tools whether leadership approves it or not and ignoring that risk doesn't make it go away. AI tools are increasingly capable, but they are definitely not accountable.

The real issue isn't whether chatbots can help. It's about where they make sense, how they should be used, and what guardrails need to be in place. Without that clarity, organizations risk exposing sensitive information, amplifying bias, introducing compliance issues, or quietly degrading the quality and authenticity of their work.

None of these risks are reasons to avoid chatbots, but they are reasons to be deliberate. Chatbots are powerful tools, and like any powerful tool, they require judgment, oversight, and clear expectations. That responsibility ultimately sits with leadership, not technology teams or individual employees.

In my next post, I'll move beyond chatbots and look at other personal AI tools before shifting into how AI can support team workflows and shared processes.