Shadow AI: The Hidden Risk in Your Organization
Shadow AI is what happens when the approved tool is slower than the deadline. Staff paste a contract into a chatbot, a team wires an API key into a spreadsheet, and a vendor ships a generative feature in a release note nobody read. None of it appears in the model inventory, and the obligations attach anyway — because the EU AI ActVerordening (EU) 2024/1689De verordening van de EU over artificiële intelligentie. Zij deelt AI-systemen in naar risiconiveau — verboden, hoog risico, beperkt risico en minimaal risico — en verbindt verschillende verplichtingen aan de aanbieder die een systeem bouwt en aan de gebruiksverantwoordelijke die het gebruikt. Zij is op 1 augustus 2024 in werking getreden en geldt in fasen; de Digital Omnibus, verordening (EU) 2026/1744, in werking sinds 27 juli 2026, heeft de hoogrisicofasen verschoven zonder de sancties te wijzigen. Artikel 99 laat die staan op ten hoogste 35 miljoen euro of 7 % van de wereldwijde jaaromzet voor verboden praktijken, en ten hoogste 15 miljoen euro of 3 % voor de meeste andere inbreuken, waaronder de hoogrisico- en transparantieverplichtingen.Geldt voorAanbieders en gebruiksverantwoordelijken van AI-systemen die in de EU in de handel worden gebracht of worden gebruikt.Volgende datum2 december 2026 — Markering van door AI gegenereerde inhoud op grond van artikel 50, lid 2, voor systemen die op 2 augustus 2026 al in de handel warenLees de brontekst (opent in een nieuw tabblad)Algemene informatie over het genoemde instrument, geen juridisch advies. regulates the use of an AI system, not the procurement process that was supposed to precede it.
Published: March 2026 · updated August 2026 · Author: Dominic Fui Dodzi-Nusenu · Reading time: ~7 minutes
Disclosure: This article was drafted using generative AI assistance and subsequently edited, verified, and expanded by human legal and tech policy specialists. The organizational case study presented below is a composite hypothetical scenario designed to illustrate compliance risks.
In brief
Shadow AI has three sources, and only one of them is people breaking rules: staff-adopted tools, AI features that appear inside already-approved software, and departmental builds using vendor APIs. The exposure is immediate rather than deferred — GDPRVerordening (EU) 2016/679 — in het Duits de DSGVODe algemene verordening gegevensbescherming van de EU. Naast rechtsgrondslag, doelbinding en de rechten van betrokkenen verbindt artikel 35 een gegevensbeschermingseffectbeoordeling aan verwerkingen die waarschijnlijk een hoog risico opleveren — de bepaling die een AI-project het vaakst tegenkomt, en die overlapt met een risicobeoordeling onder de EU AI Act zonder hetzelfde document te zijn.Geldt voorElke verwerkingsverantwoordelijke of verwerker die persoonsgegevens van personen in de EU verwerkt.Lees de brontekst (opent in een nieuw tabblad)Algemene informatie over het genoemde instrument, geen juridisch advies. applies today to personal data pasted into an external model, confidentiality obligations apply today, and the Article 4 AI literacy duty has applied since 2 February 2025 with no risk-tier threshold. The governance failure it creates is subtler than data leakage: an incomplete inventory means your classification exercise is unreliable, because you cannot rule out Annex III for systems you have not enumerated. Blocking alone reliably fails — it moves usage to personal devices where you lose visibility entirely. Discovery plus a fast, credible approval path is what actually shrinks the shadow estate.
Three sources, only one of which is misconduct
Staff-adopted tools
The familiar case: a person with a deadline uses a public assistant to summarise, draft or translate. Usually well-intentioned, usually because the sanctioned option is absent or slow. Treating this as a discipline problem misreads the cause and guarantees it recurs.
AI that arrives inside approved software
This is the largest and least-discussed source. A tool that passed review in 2024 ships an AI assistant in 2026. Your risk assessment is now stale and nothing triggered a re-review, because no purchase happened. The institution’s AI footprint grew without a single decision being made.
Departmental builds
A team with a corporate card and an API key builds something useful. It works, it spreads, and it has no owner in any inventory, no documentation, and often no one left who understands it after the original builder moves on.
What it actually exposes
| Exposure | Applies from | Why shadow AI triggers it |
|---|---|---|
| GDPR — lawful basis, transfers, processor terms | Now | Personal data sent to an external model with no DPA and often outside the EEA |
| Confidentiality and trade secrets | Now | Contract text, source code and client data pasted into consumer tools |
| AI literacy (Article 4) | Since 2 Feb 2025 | Applies to every organisation using AI, at any tier, with no threshold |
| Transparency (Article 50) | Since 2 Aug 2026 | Ungoverned customer-facing generation may need disclosure |
| High-risk obligations | 2 Dec 2027 | An unenumerated system cannot be ruled out of Annex III |
The last row is the one that changes how you should think about this. Shadow AI is not only a data-protection issue — it undermines the reliability of your whole classification exercise. A classification report that covers the systems you knew about is not a statement that nothing else is high-risk. It is a statement about your inventory.
Case scenario: the tool that passed review twice
A compliance team approved a document-collaboration platform in 2024 after a full assessment. In 2026 the vendor enabled an AI summarisation feature by default across the tenant. Nine months later, preparing for a client audit, the team discovered that regulated correspondence had been processed by a sub-processor listed nowhere in its records of processing activity.
Nobody broke a rule. The approval was genuine, the tool was sanctioned, and the control failure was that re-review was tied to procurement events rather than to capability changes. That is a governance design fault, and it is the most common shadow-AI story in regulated firms.
Surfacing it without driving it underground
Enforcement-first approaches have a predictable failure mode: usage moves to personal devices and personal accounts, where you have no visibility, no logs, and no ability to constrain what is pasted. You have not reduced the risk, you have reduced your knowledge of it.
- Discover before you police. Egress logs, SSO and OAuth grants, expense data and a genuinely amnesty-framed survey will surface most of the estate.
- Make re-review capability-triggered, not purchase-triggered. Track vendor release notes for AI features in tools you already run; this closes the largest gap.
- Give people a fast sanctioned path. Shadow AI is demand meeting an absent supply. A same-week approval route for low-risk use removes most of the motive.
- Deliver the Article 4 literacy training you already owe. It is a live obligation and it is also the cheapest control here — most risky pasting is done by people who do not know where the text goes.
- Fold findings into the one inventory. A shadow-AI register that sits beside the model inventory recreates the original problem.
How much of your AI estate is in your inventory?
Discover, classify and govern shadow AI in one place.
Related reading
- How German Banks Are Adopting AI: Market Landscape 2026
- EU AI Act Compliance Checklist for High-Risk AI Systems
- German AI Regulation: BaFin, DORA, NIS2 and the KI-MIG
Frequently asked questions
Is shadow AI really an EU AI Act problem, or just a GDPR one?
Both, and the AI Act angle is the less obvious one. GDPR exposure is immediate where personal data leaves the organisation. The AI Act exposure is that an unenumerated system cannot be classified, so your risk assessment covers only what you happened to know about.
Does blocking AI tools solve it?
Rarely, and it often makes visibility worse. Blocking on the corporate network moves usage to personal devices and personal accounts, where there are no logs and no controls. Discovery plus a fast approval path outperforms blocking in practice.
Our staff only use AI for drafting. Is that in scope?
The AI literacy duty in Article 4 applies regardless of use or risk tier, so yes for that at minimum. Whether more applies depends on what is pasted in — drafting with client data engages GDPR and confidentiality obligations immediately.
How do we catch AI features added to software we already approved?
Tie re-review to capability change rather than to purchase. Monitor vendor release notes and admin-console feature toggles for the tools in your estate, and treat a new AI feature as a trigger for reassessment even though no contract changed.
What is the fastest way to get an initial picture?
OAuth and SSO grant logs plus outbound traffic to known AI domains, cross-checked against expense data for individual subscriptions. That combination typically surfaces the large majority of the estate in days rather than weeks.