Traditional DLP is broken. It was built for a world where data moves in files across a known perimeter. That world no longer exists with data now moving with rapid expansion through prompts, agents, and AI-generated outputs, invisibly and at scale.
The single most urgent and under appreciated data security challenge facing organisations today is not ransomware. Its employees leaking sensitive corporate data through everyday use of public AI tools.
To put some of this into context:
🚨Microsoft's 2025 research found that 40% of data security incidents now occur within AI applications, and 78% of AI users are bringing their own AI tools to work, many of them agent-enabled.
🚨The layerX 2025 report highlighted that over 45% of Enterprise employees use GenAI tools and of those, 77% paste data into AI chatbots.
🚨GenAI now accounts for 32% of all corporate-to-personal data exfiltration making it the single largest vector for uncontrolled data movement outside the enterprise.
It has the feel of the wild west! It will come as no surprise that modern DLP decisions must incorporate how data is used and distributed and not just what it contains. User behaviour, access patterns, data location, and destination increasingly determine risk. In fact, The Ponemon Institute's 2025 Cost of Insider Risks Report found that 55% of insider incidents stemmed from negligence rather than malice.
The regulatory pressure around this is also very real! Under GDPR, fines can reach €20 million or 4% of global annual turnover. According to The IBM Cost of a Data Breach Report 2024 the average global breach cost stands at $4.88 million, up 10% on 2023.
As organisations change their focus around data and move to a platform play when in comes to enterprise tooling, DLP will evolve from preventing loss to enabling safe data collaboration shifting toward trust management, ensuring every data transaction is verifiable, traceable, and compliant.
Do you agree with the above? is DLP dead as we've known it or are we now finally realising the true nature of how DLP can deliver for organisations. the increased focus certainly suggests so . . .
Gradian#dlp#datasecurity#datagovernance#datasecurity#dataprotection#dspm#purview#datarisk
.avif)
