Skip to content
Data & AI

Shadow AI: Unsanctioned AI Use in the Workplace and How to Respond

'Shadow AI' means employees using AI tools at work that their organisation has not approved, monitored or risk-assessed. It is not a fringe problem: across recent European workplace research it is closer to the norm than the exception.

This workshop is not about blame or prohibition. It is about informed decision-making. We begin with what the evidence actually shows about the scale and nature of unsanctioned AI use, then examine the three strategic responses open to any organisation — ban, tolerate, or formally enable — and the practical consequences of each.

The workshop is structured around a core decision-making exercise: participants work through a set of real Shadow AI scenarios and debate the appropriate organisational response. By the end of the session, each participant has drafted a Shadow AI policy position or a set of governance principles they can take back to their organisation.

Designed for managers, HR professionals, compliance officers, and cybersecurity teams. No technical background is required.

Content
  • What Shadow AI is: definition, scale, and why it matters now
  • Research findings: what European employees are actually using and why
  • Strategic responses: ban, tolerate, or formally enable — consequences of each
  • Scenario workshop: working through real Shadow AI situations
  • Drafting your response: a Shadow AI policy position or governance principles
Learning Outcomes

By the end of this training, the participant will be able to:

  • Define Shadow AI and explain why it represents a governance challenge for organisations
  • Describe the three main strategic responses to unsanctioned AI use and the implications of each
  • Apply a structured decision framework to real Shadow AI scenarios
  • Draft a Shadow AI policy position or set of governance principles for their organisation
Training Method

Opens with data-driven trainer input, then moves immediately into group scenario exercises. The final session is a structured drafting exercise producing a Shadow AI policy position. Discussion-heavy and participant-led.  

Certification
Certificate of Participation
Prerequisites

None — accessible to all managers and HR/compliance professionals.


Planning and location
Session 1
28/09/2026 - Monday
09:00 - 17:00
Available Edition(s):

https://www.dlh.lu/web/image/product.template/3015/image_1920?unique=68513c4

This combination does not exist.

28.00 € 28.0 EUR 28.00 €

28.00 €

Not Available For Sale

Your trainer(s) for this course
RMT Labs SA, Tomasz Kramer
Tomasz Kramer
See trainer's courses.

Tomasz Kramer LL.M. is the founder of Kramer Consulting SARL-S, a Luxembourg
consultancy specialising in EU technology law, AI governance and regulatory upskilling.
With 15+ years of experience, he has designed and delivered more than 300 programmes
for 5,000+ professionals across 18 countries, helping institutions turn complex legislation
— the EU AI Act, GDPR, the Data Act — into practical, role-specific capability. He is the
creator of Reg-to-Skills, a framework that translates EU tech law into actionable
competencies. Tomasz delivers this AI training programme in partnership with RMT Labs,
combining deep regulatory expertise with hands-on, jargon-free facilitation for non-
technical professionals.