AI policy
Artificial Intelligence (AI)
Government or Non-government, Turning Uncontrolled Usage into a Risk-Managed Advantage
Shadow AI is no longer hypothetical: a NSW government contractor uploaded flood victims' personal and health data to ChatGPT, while APRA and ASIC have both issued 2026 letters demanding stronger AI governance and cyber resilience. This post sets out what boards and risk leaders should be asking right now.