AI Employee Use Policy

JPMorgan Chase CEO Jamie Dimon told business leaders that cyber risk has grown since new AI models emerged, calling it the company's biggest risk "by far." In a WSJ Leadership Institute conversation with Alan Murray, he urged firms to act immediately: segment their networks, tighten identity and access management, and use their strongest AI tools to find weaknesses before attackers do. He also said companies must get better at fixing the flaws they find and should make remediation a standing item in management meetings. Dimon is focused on critical infrastructure and the supplier networks companies rely on. He chairs the Alliance for Critical Infrastructure on an interim basis. The group includes about 50 companies, among them JPMorgan and Mastercard, and he has been recruiting more CEOs to join. He has linked the escalation to Anthropic's Mythos model, saying in an October 6 Bloomberg TV interview that risk rose tenfold after Mythos. Separately, the same day brought news of doubleAI, a Tel Aviv startup backed by Nvidia, which launched Maxwell, a product it describes as a code execution model that runs inside live programs to improve performance. The company says Maxwell cut an early customer's compute costs by 67% and that it plans to charge customers a share of the savings.

Federal prosecutors have charged Abdulrahman Alfozan, a 35-year-old Saudi national and former OpenAI engineer, with using a device to intercept oral communications. Prosecutors say he hid a recording device in a conference room at OpenAI's San Francisco headquarters. The device was a thumb-sized unit costing less than $25, the kind sold for hobbyist electronics projects, concealed inside a television. OpenAI security found a second recording device when they searched his bag earlier this month. The Justice Department says OpenAI determined the first device was likely planted on Sept. 28. Agents arrested Alfozan on Oct. 9, and the Justice Department unsealed the complaint and announced the charges on Oct. 13. OpenAI fired him. The company says it has seen "no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data."

Governor Gavin Newsom signed SB 947 and SB 951 on September 30, 2026, making AI oversight in discipline, termination, and layoffs binding California law. SB 947, authored by state Senator Jerry McNerney, bars employers from relying solely on automated decision systems to discipline or terminate workers starting July 1, 2027. A human must check the system's output against supporting data and give the worker written notice. The bill is a revised version of SB 7, which Newsom vetoed in October 2025 over concerns that its notice requirements were overly broad. The signed version narrows its scope to discipline and termination. SB 951 requires employers to disclose when AI or automation drives a mass layoff, relocation, or termination, effective January 1, 2027. A third law, AB 1883, bars certain AI workplace surveillance, including tools that try to read emotional state or collect neural data, also effective January 1, 2027.

A 35-year-old OpenAI engineer, Abdulrahman Alfozan, who joined the company in July 2025, is in federal custody after allegedly planting a hidden audio recorder in an executive conference room at OpenAI's San Francisco offices. The Department of Justice confirmed the arrest on October 13, 2026, and CNBC and Al Jazeera have also reported it. According to reports, the device was installed about two days before it was found during a routine review on or around September 30. OpenAI says it referred the matter to the FBI and fired Alfozan once the device was traced to him. The company says it has no indication he improperly accessed or took model weights, source code or customer data, and that it used its own AI models to help identify who planted the device.

Governor Gavin Newsom signed SB 947 and SB 951 on September 30, 2026. SB 947 bars employers from disciplining or firing workers based solely on an automated decision system. When an employer relies primarily on such a system, a human reviewer must corroborate the decision with other records, such as managerial evaluations or personnel files. SB 951 requires any Cal-WARN layoff notice to disclose when artificial intelligence or automation caused the job losses. Newsom also signed AB 1883 the same day, which restricts AI tools that infer workers' emotional states or collect neural data, so the package is broader than the two-bill headline suggests.

A October 2026 National Law Review article identifies seven employment-law risks of AI smart glasses in the workplace. The core concerns are covert recording, confidentiality, and biometric data. The devices can quietly capture audio and video, along with biometric identifiers such as facial geometry and voiceprints, often without notice to the people being recorded. Illinois's Biometric Information Privacy Act (BIPA) imposes $1,000 to $5,000 in statutory damages per violation when consent is not obtained in writing. Texas's Capture or Use of Biometric Identifier Act (CUBI) carries fines of up to $25,000 per violation. The article also flags narrowly tailored restrictions that must still comply with labor law, ADA accommodation obligations, proprietary processes visible on manufacturing floors, customer data displayed on screens, sensitive witness identities in HR investigations, and attorney-client communications that could raise privilege waiver issues if routed to a third-party AI platform. Employers must engage in the interactive process to determine whether smart glasses may be a reasonable accommodation.

Former staff from Anthropic, OpenAI, and Google DeepMind testified at a New York City Council hearing on October 5, 2026, after the companies sent representatives following a warning from the council's office that subpoenas would follow. Jacob Coxon, Daniel Kokotajlo, and Alex Turner spoke at the hearing. In a separate development, Robinson, OpenAI's former safety leader, wrote in an essay for The Atlantic that the "trial and error" approach favored by AI companies has to end, describing the wave of departures as a "parade of former colleagues" leaving over concerns about the technology or how it is used. Council Speaker Julie Menin says the council will go to court, alleging that one company is in direct violation of its subpoena.

Opinion pieces published October 14–17, 2026, by two certified public accountants and syndicated through UPI and The Washington Post, argue that businesses, not AI toolmakers, are generally the party exposed when AI tools produce errors that harm clients or customers. The pieces focus on professionals who use AI for research and client work, and they warn that law firms and other employers have not built enough safeguards to catch AI-generated mistakes. As UPI puts it, when an AI a business is using makes a mistake, the business tends to be on the hook, not the toolmaker. Usage is widespread: Gallup found 52% of U.S. employees and 68% of professional services workers were using AI by February 2026, and a spring 2026 Thomson Reuters survey found 74% of professionals use AI several times a week for work.

Generative AI is creating new ways for entertainment companies to lose confidential material, including unreleased scripts and business plans, according to a new advisory from Jackson Lewis attorneys Steven M. Zimmerman and Jiyoon Yoon, published on NatLawReview on October 13, 2026. The authors recommend updating confidentiality agreements, tightening access controls, expanding employee training, and adopting formal AI governance policies. The piece describes exposure risk in general terms and does not report a specific leak or name a company that has suffered one.

Paychex has released an AI agent through SixFifty, its employment-law compliance platform, and it is available now to SixFifty standalone customers and trial users. Users interact through a chat window. The agent answers employment-law questions and can carry out multi-step compliance tasks, including drafting employment documents and handbooks, distributing updated handbooks, delivering labor law posters, and tracking employee acknowledgments. The company calls it the human capital management industry's first "agentic HR compliance specialist," a claim that comes from Paychex and SixFifty. Integration into the core Paychex products is planned for later this fiscal year. The announcement names SixFifty founder and CEO Kimball Parker, who has argued that employment law changes too fast for smaller employers to track manually.

IBM's 2026 Cost of a Data Breach Report finds that security incidents involving unapproved AI tools, known as shadow AI, more than doubled this year, rising from 20% to 43% of breached organizations. Those incidents cost more. Average costs climbed from $4.63 million to $5.39 million, compared with a global average breach cost of $4.99 million. Regulatory fines followed in roughly one in five cases. Forty-nine percent of shadow AI incidents led to data loss or compromise, and 42% caused operational disruption. An opinion column on shadow AI cites these figures and argues that companies should first examine why employees turn to unapproved tools before restricting them.

The Fast Company opinion piece revisits a December 2024 Harvard Business Review article by Nicole Radziwill and Todd McClees, which warned that most enterprises were poorly positioned to benefit from AI. The new piece argues that the warning still holds: AI is as much a human problem as a technical one, and workers need support to see gains. It points to three 2026 studies. A February NBER survey of about 6,000 executives found that two-thirds say their companies use AI, but 90% say it has had no impact on productivity or employment over the past three years. A March working paper from economists at the Atlanta and Richmond Federal Reserve banks and Duke University, based on roughly 750 executives, found that perceived productivity gains exceed measured ones. A January UK government report said there was "limited robust statistical evidence" linking higher firm-level AI adoption to higher overall productivity.

Federal prosecutors in Northern California have charged Abdulrahman Alfozan, a 35-year-old Saudi national and former OpenAI engineer, with attempting to use a device to intercept oral communications. Prosecutors say the device was hidden in a USB port on the back of a television in OpenAI's San Francisco office, and the FBI says a small piece of toilet paper concealed it. OpenAI's internal countermeasures team found a recording device on Sept. 30 during a sweep of a conference room. Alfozan was arrested on Oct. 9 and fired. He is in federal custody and has a detention hearing on Oct. 19. If convicted, he faces up to five years in prison, a $250,000 fine, and three years of supervised release. FBI Director Kash Patel said the device was meant to secretly capture sensitive communications about OpenAI's superintelligence work. Prosecutors also allege that Alfozan, an engineer at the company since July 2025, used an AI productivity agent to seek information about meeting-room calendars and capabilities for about a month, through Sept. 16. OpenAI says it has no indication that he accessed or exfiltrated model weights, source code, or customer data, and it says it will support the FBI's investigation.