By Folu Adebayo
A lawyer in the United Kingdom needed to summarise a confidential client document. Forty pages. A busy day. So they did what millions of professionals around the world now do without a second thought.
They pasted it into an AI tool.
Faster than reading it line by line. Nobody had told them not to. Nobody had told them they could. There was no policy. No training.
No record of the decision.
It seemed harmless. It was not.
A UK tribunal has now ruled that uploading confidential documents to an AI tool can be treated as the equivalent of placing them in the public domain. The legal privilege protecting those documents, the confidentiality that is the very foundation of the relationship between a professional and their client was lost. Permanently.
Not because anyone acted in bad faith. Because the tool did what such tools do the moment information is entered into them.
“The employee was not trying to do anything wrong. They were trying to work faster.”
Why this matters far beyond the United Kingdom
It would be easy for African business leaders to read this as a distant story. A British tribunal. A British case. A British problem.
That would be a mistake.
The behaviour at the centre of this ruling a professional pasting confidential information into an AI tool to save time is happening in every law firm, every bank, every hospital, every government office, and every consultancy in Lagos, Nairobi, Accra, and Johannesburg right now. Today. As you read this.
The technology does not respect borders. The behaviour does not respect borders. The risk does not respect borders.
The only thing that varies from country to country is whether there is a governance framework in place to manage it and whether the people using these tools have been told, clearly, what is and is not permitted.
In most African organisations, that framework does not yet exist.
The quiet leak
Consider what is most likely happening inside your own organisation as you read this.
A member of staff has a long report to summarise. They paste it into a free AI tool.
A colleague is drafting a difficult email and asks an AI assistant to improve the wording including the confidential context. Someone in finance uploads a spreadsheet of sensitive figures to ask the AI to analyse it. A junior employee, eager and capable, uploads a client contract to extract the key terms quickly.
None of these people are acting maliciously. Every one of them is trying to do their job well.
And every one of them may be moving confidential information client data, commercial secrets, personal information, privileged material outside the protected boundary of the organisation.
This is not a hypothetical risk. Industry research suggests that the overwhelming majority of organisations have employees using AI tools, while only a small minority have any policy governing what may be entered into them. The gap between adoption and governance is not narrowing. It is widening.
“The technology does not respect borders. Neither does the risk.”
Why Africa is particularly exposed
There are three reasons this risk is especially acute across African markets.
First, AI adoption across Africa has been rapid, mobile-first, and largely informal. Professionals have embraced AI tools with energy and ingenuity often ahead of the organisations they work for. That is a strength. But it means usage is running far ahead of governance.
Second, many African organisations do not yet have the data protection infrastructure, the internal compliance functions, or the governance frameworks that would, in other markets, provide at least some guardrails. The legal frameworks are developing , Nigeria, Kenya, Ghana and South Africa have all made significant progress on data protection but the translation of law into day-to-day organisational practice remains incomplete.
Third, the consequences of a confidentiality breach are severe in any market, but in markets where trust is hard-won and reputational damage spreads quickly, the cost can be existential. A bank that leaks customer data, a law firm that loses privilege over client documents, a hospital that exposes patient information these are not recoverable inconveniences. They are breaches of the trust on which the entire business depends.
What African leaders must do now
The good news is that the solution is neither expensive nor complex. It does not require new technology. It requires leadership, clarity, and a small amount of disciplined effort.
First, establish a clear AI usage policy. A single, plain-language document that states what types of information may and may not be entered into AI tools. It does not need to be sophisticated. It needs to exist, and it needs to be communicated.
Second, train your people. Not a lengthy programme a clear, honest conversation. Most employees who create AI-related risk do so because nobody has explained the danger to them. Once they understand, the overwhelming majority adjust their behaviour immediately.
Third, create a record. The UK tribunal ruling makes clear that when accountability is tested, organisations will be expected to demonstrate that their people understood the rules. A simple, dated record showing that staff have received and acknowledged the AI usage policy is no longer an administrative nicety. It is a protection.
Fourth, lead by example. When senior leaders talk openly about responsible AI use, it gives everyone else permission to ask the questions they are currently afraid to ask.
The opportunity inside the warning
It would be easy to read this column as a reason to fear AI, or to restrict it. That is not my intention.
AI is one of the most powerful tools African professionals have ever had access to. It can close capability gaps, accelerate work, and allow small organisations to compete with much larger ones. The answer is not to ban it. The answer is to govern it.
The organisations that will thrive in the African AI economy are not the ones that move fastest or the ones that move most cautiously. They are the ones that move deliberately adopting AI with energy, and governing it with discipline.
The UK tribunal ruling is a warning. But it is a warning delivered early enough to act on. African leaders who read it, understand it, and act on it now will protect their organisations, their clients, and their reputations.
Those who treat it as someone else’s story will learn the same lesson later and at a far higher price.
The choice, as always, belongs to leadership.
Folu is AI Architect & Risk & Governance Director, United Kingdom, Founder of AIExpertsPro, and an AI governance advisor to UK and African financial institutions, and can be reached via aiexpertspro.co.uk/folu@aiexpertspro.co.uk