We’ve seen this movie. Prohibition lost every prior round — it’ll lose this one too.
“Shadow AI” is getting written up as a brand-new crisis. It isn’t. We’ve seen this movie.
Twenty years ago it was staff emailing files to personal Gmail. Then Dropbox turning up in the enterprise without IT’s blessing. Then BYOD. Then the rogue SaaS app marketing expensed. Every time, the panic sounded the same — and every time, the ban failed. Not because people are reckless, but because they route around policy when the sanctioned path is slower than the workaround. It always has been.
So no, shadow AI isn’t unprecedented. It’s the same human pattern in a new coat.
But here’s the part that genuinely is new, and it’s worth sitting with. When someone dropped a file in Dropbox, you could still go get it back. When they paste your source code into a model you don’t control, there’s no getting it back — the data doesn’t just leave the building, it can be absorbed into something that gets smarter because of it. Same movie. The projector just got faster, and this time the film doesn’t rewind.
The fix hasn’t changed in twenty years either: don’t ban it, out-compete it. Sanction the good tools. Make the safe path the easy path. Monitor. Educate. Prohibition lost every prior round; it’ll lose this one too.
