Are AI Policies the New Social Media Policies?

If you’ve been in HR long enough, you will likely remember the early days of social media at work.

Organizations scrambled to respond. Policies appeared almost overnight, and these were often reactive, sometimes overly restrictive, and rarely aligned to how employees were actually using the technology. It took time for businesses to move from fear-driven governance to something more balanced and human.

Today, we are seeing history repeat itself, only this time with artificial intelligence.

The pace of AI adoption in the workplace has been nothing short of remarkable. According to recent research, as many as 94% of employers and 84% of employees have already used AI at work, while broader studies suggest that around half of workers globally are now using AI tools in some form.

But here’s the tension: policy is struggling to keep up.

Only around 31% of organizations currently have a comprehensive AI policy in place, despite the vast majority of employees already engaging with the technology. In other words, employees are moving ahead regardless of policy or not, and this can be a huge risk for employers.

Seem Familiar?

This gap between adoption and governance should feel familiar. When social media first entered the workplace, organizations focused heavily on the control element (what employees couldn’t say, share, or do). This then resulted in policies that often stifled value rather than unlocking it.

We risk making the same mistake with AI.

In many organizations, AI policies are being developed quickly, driven by concerns around risk, compliance, and data security. And these are valid concerns, but when policy is created without understanding how employees are actually using AI, it can create friction rather than clarity.

Research from Gartner highlights this challenge clearly: rushed AI implementation, often without HR involvement, leads to poor adoption and misaligned expectations between employees and leadership.

The Reality on the Ground

Employees are not just using AI, they are experimenting with it…often in ways leaders don’t fully see.

Recent studies show that 71% of employees admit to using unapproved AI tools at work, while more than half say they actively hide their use of AI from their employers.

This isn’t necessarily a sign of misconduct. More often, it’s a signal that employees see value in AI but lack the guidance, confidence, or psychological safety to use it openly.

How to Avoid the Same Mistakes

So how do we avoid repeating the ‘social media policy’ scramble?

First, we need to reframe what an AI policy is for. It’s not just about control, but rather enablement. The most effective organizations are taking a more balanced approach:

• Co-creating Policies with Employees – understanding how AI is already being used (formally and informally) leads to policies that reflect reality, not assumptions.
• Prioritizing Education over Restriction – with only a minority of employees receiving formal AI training, capability-building is critical. Having clear guidance helps to build confidence and ultimately reduces risk.
• Embedding Trust into Governance – heavy-handed restrictions often drive behavior underground. Transparent, principles-based policies encourage responsible use instead.
• Positioning HR at the Center – AI is not just a technology issue, it’s a workforce issue. HR has a critical role to play in shaping how AI impacts employee experience, culture, and performance.

The Path Forward

Unlike the early days of social media, we have the benefit of hindsight. We know what happens when governance lags behind behaviour, and when policy is driven by fear rather than insight.

AI doesn’t have to follow that path.

Done well, AI policies can do more than mitigate risk. They can unlock innovation, improve productivity, and create more meaningful work. The goal isn’t to slow AI down, but to help organizations and their employees use it well.

The future of work won’t be defined by whether we have AI policies or not, it will be defined by how thoughtfully employers create them. If you would like to discuss how we can help formulate robust and realistic AI policies for your business, please do get in touch with us today.