AI Adoption in the Workplace vs. Policy Awareness: KnowBe4 Survey Findings

A new survey by KnowBe4, which examined employee engagement with artificial intelligence (AI) tools across Germany, South Africa, the Netherlands, France, the UK, and the US, reveals a troubling disconnect between the widespread use of AI in workplaces and employees’ awareness of their company’s AI policies.
According to the research, while 60.2% of employees report using AI tools at work, only 18.5% are aware of their company’s policies surrounding AI usage. This significant gap suggests that most employees are using AI without clear guidance, raising concerns about the potential risks of unregulated use.
The Risks of AI Misuse and Lack of Oversight
Roger Grimes, data-driven defense evangelist at KnowBe4, warns that the gap between AI adoption and policy awareness is a serious threat to organizations. He describes it as a "ticking time bomb" that could lead to significant risks, including data breaches, compliance violations, and reputational damage.
The survey also revealed that 10% of employees admitted to inputting client data into AI tools to complete work tasks, underscoring the dangers of internal misuse. Without proper policies and training, employees may unknowingly compromise sensitive information, further exacerbating the potential for security issues.
Also Read: Silicon Valley Summit to Feature Gates, Tijani, Ribadu on AI, Cybersecurity
Regional Differences in AI Adoption and Policy Awareness
The survey also highlighted varying AI adoption rates and policy awareness across different regions. South Africa led with the highest AI adoption rate at 70.1%, while France had the lowest at 54.2%. Despite these differences, a common issue emerged across all regions: a lack of awareness regarding company AI policies.
In the Netherlands and the UK, 16.1% and 15.8% of employees, respectively, reported being unaware of their company’s AI policies. Furthermore, only 17% of employees use AI at work with their IT/security team’s knowledge, with South Africa being the only region showing a slightly higher percentage at 23.6%.
The Need for Action: Policy Communication and Training
The research emphasizes the need for organizations to bridge the awareness-usage gap. To mitigate risks, it is essential that companies not only establish clear AI policies but also actively communicate them and provide comprehensive training on secure and ethical AI use.
Additionally, organizations must ensure that employees have access to approved, user-friendly AI tools to ensure that AI adoption is safe, effective, and in line with company policies.