NordVPN has revealed new insights into the privacy risks Canadians face as AI tools become embedded in their daily work routines.
According to data from the National Privacy Test (NPT) for 2025, 95% of Canadians do not understand what privacy issues to consider when using AI for work. As millions of workers turn to AI assistants like ChatGPT, Copilot, and other generative tools to boost productivity, they may be unknowingly exposing sensitive personal and company data.
“The rapid adoption of AI in the workplace has outpaced our understanding of its risks. People are typing confidential information into AI tools without realizing where that data goes, how it’s stored, or who might have access to it,” said Marijus Briedis, chief technology officer at NordVPN. “Unlike a conversation with a colleague, interactions with AI tools can be logged, analyzed, and potentially used to train future models. When employees share client details, internal strategies, or personal information with AI assistants, they may be creating privacy vulnerabilities they never intended.”
The risks of AI don’t end at work
While Canadians struggle to protect their data when using AI tools, they are also increasingly becoming targets of AI-powered attacks. The same technology that boosts workplace productivity is being weaponized by cybercriminals to create scams that are more convincing than ever before.
According to the National Privacy Test, 26% of Canadians cannot correctly identify common scams being carried out using AI technology, such as deepfakes and voice cloning. As AI capabilities extend past voice cloning to fabricating entire videos complete with realistic body movements of generated characters that may look like a real person, these scams are becoming increasingly difficult to detect.
The consequences for individuals are already severe. According to previous NordVPN research, 33% of respondents suffered online scams, and 49% of them lost money as a result.
“AI has simplified cybercrime. You no longer need technical expertise to craft a convincing phishing email, clone someone’s voice, or build a fake shopping website that looks identical to the real thing,” said Briedis. “Scammers use AI to design almost identical replicas of popular retail sites. The barrier to entry for cybercriminals has never been lower.”
The threat is only expected to grow. NordVPN experts predict that AI-driven attacks will be among the key cybersecurity risks in 2026, with cybercriminals using increasingly sophisticated methods to exploit vulnerabilities.
Expert advice on protecting yourself in the AI era
To help Canadians navigate the growing AI vulnerability gap, Briedis offered some risk-prevention measures.
- When using AI tools at work:
- Never input confidential company data, client information, or personal details into AI assistants.
- Understand that your conversations with AI tools may be logged, stored, and potentially used to train future models.
- Check your organization’s AI usage policies before using generative AI for work tasks.
To protect yourself from AI scams:
- Be skeptical of unexpected calls or messages, even if the voice sounds familiar — establish a family code word for emergencies.
- Verify requests for money or sensitive information through a separate, trusted communication channel.
- Remember that AI can now create convincing fake videos and images — seeing is no longer believing.
- Use security tools correctly and keep software updated to protect against emerging threats.