Number of Canadians using generative AI at work and school is growing, posing potential risks: survey

A recent survey conducted by KPMG reveals that Canadians are experiencing increased productivity using generative AI, but there are concerns that some users may be entering sensitive information into AI prompts.

A recent survey conducted by KPMG reveals that Canadians are experiencing increased productivity using generative AI, but there are concerns that some users may be entering sensitive information into AI prompts.

Of 5,140 Canadians involved in the survey, 1,052 (20 per cent) of them acknowledged that they have used generative AI at work and school mostly to generate ideas, write essays, and create presentations.

Respondents have reported that using generative AI boosted productivity and quality, however, in doing so, they were engaged in behavior that could potentially create risks for their employers.

"It's absolutely critical for organizations to have clear processes and controls to prevent employees from entering sensitive information into generative AI prompts or relying on false or misleading material generated by AI," Zoe Willis or KPMG said in a news release published on Tuesday. ”This starts with clearly defined policies that educate your employees on the use of these tools. Organizational guardrails are essential to ensure compliance with privacy laws, client agreements, and professional standards.

According to the survey, many users are say they’re experiencing increased productivity using generative AI, but there are concerns about entering sensitive information into AI prompts by some users.

The survey findings show that 23 per cent of working professionals said they are entering information about their employer (including its name) into AI prompts. Some respondents (10 per cent) have even put their private financial data while 15 per cent said they’ve entered other proprietary information, such as human resources or supply chain data.

The KPMG survey highlights the necessity of “strong” organizational control, policies, and employee training to avoid entering sensitive information without verification.