← Back to Insights Workplace AI

Your AI Habits at Work Could Cost You More Than Your Job.

You use AI tools at work. Maybe you paste a draft email into ChatGPT to clean it up. Maybe you summarize meeting notes with an AI assistant. Maybe you use your company laptop to run a quick prompt through Claude or Gemini on your lunch break. It feels harmless. It probably feels helpful.

But here is what most employees are not thinking about: that same AI activity can be used against you, not just to justify your termination, but to gut your legal remedies if your employer ever discriminates against you.

This is not hypothetical. It is a well-established legal strategy, and employers and their attorneys know exactly how to use it.

Part One Your Employer’s AI Policy Probably Already Exists. You Just Don’t Know It.

Here’s the most common misconception employees have: “My company doesn’t have an AI policy, so I’m fine.”

Wrong. Most employers have not needed to create a standalone AI policy because their existing policies already cover what you are doing, and most employees have signed them without reading closely.

Policies That Already Govern Your AI Use

  1. Confidentiality and Data Security Policies

    Almost every employer has some version of this. These policies prohibit employees from disclosing, transmitting, or sharing confidential company information with unauthorized third parties.

    When you paste client data, internal financial information, proprietary product details, patient records, personnel information, or trade secrets into a public AI tool like ChatGPT, you are transmitting that information to a third-party server. Under the Texas Uniform Trade Secrets Act (Tex. Civ. Prac. & Rem. Code § 134A.001 et seq.), a “trade secret” includes business, financial, technical, and economic information that derives independent economic value from not being generally known, and transmitting it to an external AI server can constitute “misappropriation” through “improper means,” including breach of a duty to maintain secrecy. § 134A.002(2)-(3). The fact that you did not intend to disclose it to a human being is legally irrelevant. The data left the building.

    Violation? Likely yes, even if the policy says nothing about AI.

  2. Acceptable Use Policies (AUPs) for Company Technology

    If you signed an acceptable use policy when you were onboarded, it almost certainly restricts how you can use company-owned devices, networks, and software. Using your work laptop or your employer’s Wi-Fi network to access personal AI tools, even during personal time, may fall squarely within prohibited personal use of company technology.

  3. Codes of Conduct and Integrity Policies

    These policies typically require employees to act honestly, represent their work accurately, and maintain professional standards. When an employee submits AI-generated work without disclosing that AI was used, in a context where their employer expects original analysis, original writing, or professional judgment, that conduct can be characterized as misrepresentation, dishonesty, or a breach of professional integrity.

    It doesn’t have to say “do not use AI.” It only has to say “be honest” and “represent your work accurately.”

  4. Intellectual Property Assignment Agreements

    Many employees sign agreements assigning the IP they create in the course of employment to their employer. Using an outside AI tool to generate work product on company time can create murky ownership questions. If the employer’s IP policy requires that all work be developed using approved tools only, using an unapproved AI tool may technically place you outside that policy.

  5. Industry-Specific Regulations Incorporated by Policy

    If you work in healthcare, law, finance, or education, your employer’s policies may incorporate regulatory obligations that independently prohibit sharing certain categories of information with AI tools. HIPAA-covered entities, for example, are bound by rules about protected health information that apply regardless of whether a policy specifically names ChatGPT.

    In Texas, the Texas Uniform Trade Secrets Act (Tex. Civ. Prac. & Rem. Code § 134A.001 et seq.) also provides employers an independent cause of action when confidential business information is disclosed without authorization. The statute requires only that the owner took “reasonable measures” to keep the information secret. § 134A.002(6).

Part Two The Four AI Scenarios That Can Get You Fired.

Let’s put this in plain terms with the four most common ways employees create policy violations without realizing it.

Scenario 01
Pasting Confidential or Client Data Into a Public AI Tool

You are working on a project. You want a quick summary or a better-written version of something. You copy and paste internal data, client names, contract terms, or personnel records directly into ChatGPT or a similar public platform.

The problem: Most free and standard-tier AI tools process and may retain input data on external servers. That data is no longer in your employer’s control. Depending on your industry and your employer’s policies, this can trigger a data breach, a confidentiality violation, a regulatory violation, and a terminable offense, all from one paste.

Scenario 02
Personal AI Use on Work Devices or Networks

You use your work computer or work Wi-Fi to access personal AI tools for anything from writing a personal email to planning a vacation itinerary. Your employer’s acceptable use policy may prohibit any personal use of company technology, full stop.

The problem: IT systems log activity. Network traffic is monitored. If your employer is building a case against you for any reason, your browsing and usage history on company systems is fair game, and every personal AI query you ran on a work device is a documented policy violation.

Scenario 03
Using AI to Draft Work Product Without Disclosure

You used AI to write a memo, draft a report, or generate analysis that you submitted as your own professional work, without disclosing that AI was involved.

The problem: If your role requires you to exercise professional judgment or demonstrate a particular skill set, and your employer has policies requiring honest representation of your work or use of approved tools only, submitting undisclosed AI-generated work can be characterized as misrepresentation. Depending on the field, it can also raise questions about competency and professional standards.

Scenario 04
AI-Generated Content Passed Off as Your Own

Similar to Scenario 3, but broader: performance reviews, self-evaluations, training certifications, professional development submissions, or any document where your employer expects your voice, your judgment, and your original contribution. But it is entirely AI-generated.

The problem: This goes directly to honesty and integrity policies. The more your employer’s culture or your specific role depends on original thinking, the more this type of conduct is vulnerable to being characterized as a serious policy violation.

Part Three The Legal Doctrine That Can Destroy Your Case.

Now here is where it gets serious.

Suppose you get fired. And suppose the real reason you got fired was discrimination: your race, your sex, your age, your disability, your national origin, your religion. These are protected categories under federal law, including Title VII of the Civil Rights Act of 1964 (42 U.S.C. §§ 2000e-2 through 2000e-17), the Age Discrimination in Employment Act (29 U.S.C. §§ 621-634), the Americans with Disabilities Act (42 U.S.C. § 12101 et seq.), and 42 U.S.C. § 1981. You have a strong case. Your employer acted unlawfully.

You hire an attorney. You file with the EEOC. You are heading toward litigation.

Your employer hires a law firm. And that law firm’s first job is to find a reason, any reason, that they can argue would have independently justified your termination.

This is the after-acquired evidence doctrine, and it is one of the most powerful tools employers have to limit what you can recover even when they are wrong.

What Is After-Acquired Evidence?

After-acquired evidence refers to information an employer learns after a termination (typically during litigation) that the employer claims would have justified the termination on its own, independent of the discriminatory reason that actually drove the decision.

The United States Supreme Court addressed this doctrine directly in McKennon v. Nashville Banner Publishing Co., 513 U.S. 352, 355, 115 S. Ct. 879, 130 L. Ed. 2d 852 (1995). In that case, an employee was fired in an age discrimination case. During discovery, the employer discovered that she had copied confidential company documents, a policy violation that, the employer argued, would have gotten her fired anyway.

The Supreme Court held that after-acquired evidence of employee misconduct does not bar a discrimination claim. The employer still violated the law when it discriminated. But it does limit the remedies the employee can recover.

The Fifth Circuit applied this holding in Shattuck v. Kinetic Concepts, Inc., 49 F.3d 1106, 1108-1109 (5th Cir. 1995), confirming that the significant inquiry is whether the employer would have terminated the employee upon discovery of the wrongdoing, not whether the employer would have hired the employee in the first place.

Specifically, under McKennon:

  • Back pay is cut off as of the date the employer discovered the misconduct, meaning you lose back pay for the entire period from discovery forward.
  • Reinstatement is generally unavailable because the employee’s own misconduct makes it an inappropriate remedy.
  • Front pay (the money you would have earned in the future) is typically unavailable for the same reason.

To put this in perspective: under Title VII, a prevailing plaintiff can ordinarily recover back pay, front pay, compensatory damages for emotional pain and suffering, and exemplary (punitive) damages up to statutory caps ranging from $50,000 to $300,000 depending on employer size. 42 U.S.C. § 1981a(b)(3). After-acquired evidence can strip away most of that recovery, leaving only a fraction of the back pay and eliminating reinstatement entirely. McKennon, 513 U.S. at 361-363.

In practical terms, this means you can win your discrimination case and still walk away with a fraction of what you were owed.

How Employers Use This Doctrine Offensively

Here is the strategic reality that employment attorneys on the employer side understand very well, and that employees rarely appreciate until it is too late.

Discovery is an investigation. When your employer goes into litigation, its lawyers serve document requests, interrogatories, and subpoenas designed to uncover anything about your conduct during employment. They request access to company devices. They pull network logs. They review your email. They look at every tool you used on company systems.

Your AI use history is a roadmap. If you were pasting client data into ChatGPT, your employer’s IT forensics team may be able to show exactly what you sent, when you sent it, and what policy it violated. If you submitted AI-generated work product as your own, metadata may reflect that. Network logs may show what tools you accessed on company equipment.

The standard is employer intent, not punishment. Under McKennon, the employer must demonstrate that it would have terminated you for the misconduct had it known about it at the time. This is not a high bar. Remember: Texas is an at-will employment state. Either party may terminate the employment relationship “for good reason, bad reason, or no reason at all.” Montgomery County Hospital Dist. v. Brown, 965 S.W.2d 501, 502 (Tex. 1998). If the conduct clearly violates a written policy that calls for termination, and the employer can produce that policy with your signature, the doctrine applies.

The timing of discovery is irrelevant. It does not matter that the employer found out about the policy violation six months into litigation. Under McKennon, once the misconduct is discovered, the remedy window closes as of the discovery date, not as of the termination date.

The Compounding Problem: Discrimination and Retaliation Cases

This doctrine creates its most dangerous consequences in exactly the cases where employees most need full relief.

An employee is passed over for promotion because of her race. She complains internally. Her internal complaint is protected activity under 42 U.S.C. § 2000e-3(a), which prohibits retaliation against an employee for “opposing” a practice made unlawful by Title VII. She is fired two weeks later in clear retaliation. She files with the EEOC and eventually sues. Her damages are significant: years of lost wages, career derailment, emotional harm.

During discovery, the employer finds that she regularly pasted client information into ChatGPT and used her company laptop for extensive personal AI use. The employer argues both were terminable policy violations. The court agrees. Her back pay is cut as of the discovery date, and reinstatement is off the table.

She won on the law. She lost on the remedy. And the AI use she thought was harmless handed her employer the weapon it needed.

Part Four What You Should Do Right Now.

  1. Locate and read your employer’s policies.

    Pull your employee handbook, any acceptable use agreement you signed, your confidentiality agreement, your code of conduct, and any IP assignment agreement. You are looking for language about data security, technology use, honesty, professional standards, and approved tools.

  2. Stop using public AI tools with any company data.

    Even if it feels low-stakes. Even if everyone on your team does it. Even if you have not seen any enforcement. The risk is not today. It is in litigation two years from now.

  3. If you are having workplace problems now, talk to an employment attorney before the situation escalates.

    One of the first things a good employment attorney will do is walk through your conduct history so there are no surprises when the employer starts digging. This is not about guilt. It is about strategy.

  4. Document what is happening to you at work.

    If you believe you are experiencing discrimination or retaliation, document it now: outside of company systems, on your personal device, in your personal email. Your contemporaneous record may be the difference between a strong case and a complicated one.

  5. Understand that employers are increasingly building AI-use auditing into their HR and legal processes.

    What felt invisible and harmless in 2023 is now a structured investigation category in 2025. The norms have shifted. Act accordingly.

The Bottom Line

Your employer does not need a specific AI policy to discipline you for how you use AI tools at work. The policies already exist. The legal doctrine to limit your recovery is already established. And employers and their attorneys are increasingly trained to use both against you.

Knowing this does not mean you can never use AI at work. It means you need to use it thoughtfully, within the boundaries of your employer’s existing policies, and with a clear understanding of what is at stake if you do not.

About the Author

N. Lucy Chukwurah, Esq.

Attorney and Founder, NLC Law Group

Lucy Chukwurah represents employees and employers across the full spectrum of employment law, including workplace discrimination, retaliation, severance review, EEOC and TWC matters, workplace mediation, and HR compliance counsel. She is admitted to the State Bar of Texas and federally admitted in Illinois. Certified mediator. Thurgood Marshall School of Law.

If anything in this article describes a situation you are facing, NLC Law Group offers virtual consultations, self-scheduled and fixed-fee.

Schedule a Consultation →
Work with NLC Law Group

Begin a conversation.