The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →HR should assess the conduct, not assume that using AI proves misconduct. Find out whether the employee used paid work time, company devices or accounts, confidential information, or employer work product; whether the side job creates a conflict; and whether a relevant disclosure or performance rule was breached. Then investigate fairly, protect information, and choose a proportionate response under the applicable policy and local law.
What counts as AI-assisted moonlighting?
Moonlighting is outside work alongside a person’s primary job. AI can help with that work, but using an AI tool is not the same thing as taking a second job—and ordinary personal use of AI is not automatically moonlighting either. HR should establish what the employee actually did before deciding which rules may apply.
As an Amazon Associate I earn from qualifying purchases.
Separate four questions that are often conflated:
- Outside work: Did the employee perform paid or business-related work for another person or venture?
- Use of employer resources: Did the work happen on paid hours, or use employer devices, accounts, licenses, systems, or staff?
- Information and work product: Did the employee put company or client information into an unapproved AI service, reuse employer-created material, or produce work that belongs to the employer under applicable terms?
- Conflict and performance: Does the outside work compete with the employer, interfere with duties, or violate a disclosure requirement?
These are fact-finding questions, not a universal legal test. A contract, policy, collective agreement, role-specific duty, or local law may change what an employer can require or prohibit.
Why HR needs clear rules before investigating
Workplace AI use is growing, while formal guidance is uneven. Gallup reported that the share of U.S. employees who said they used AI at work at least a few times a year increased from 40% in Q2 2025 to 45% in Q3 2025. Separately, a 2026 PagerDuty survey found that 66% of surveyed office professionals had used unauthorized AI tools at work. These figures cover different populations and questions; neither establishes that employees were moonlighting or that AI use was improper.
#1 Best Overall
The PagerDuty survey also reported that, among respondents who used potentially unauthorized tools, 53% received informal feedback or guidance to stop and 48% reported formal consequences. Those percentages are not stated to be mutually exclusive. They describe that company survey, not a general rate of discipline across workplaces.
Policy gaps are visible in other settings too. The UK Department for Science, Innovation and Technology’s 2025–2026 Business Data Survey found that, among businesses using AI, 17% had policy or guidance: 5% had a formal written policy and 12% informal guidance. In Canada, Statistics Canada reported in March 2026 that 64.1% of workers had not used generative AI for their main job or business in the prior 12 months; among those non-users, 9.8% cited security, privacy, environmental, or ethical concerns. That finding signals possible questions or reservations among workers, not evidence of a particular breach.
Rank #2
Other measures describe different aspects of adoption and oversight. The Office of the Privacy Commissioner of Canada reported that business representatives saying their company used AI rose from 6% in 2023 to 16% in 2025; among surveyed Canadian businesses using AI, close to half (45%) reported research and document drafting. A 2025 European Commission survey found that 37% of surveyed EU workers said employers used AI and other tools to monitor working hours. These results should not be treated as a single trend or compared as if they measured the same behavior.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11How should HR investigate a suspected case?
- Identify the specific concern. Record what prompted the inquiry and which policy, contract term, or work obligation may be relevant. An AI-generated score, unusual activity pattern, or rumor can be a lead, but it is not proof of outside work or wrongdoing.
- Check the evidence and scope. Determine whether there is credible evidence of a second job, use of company time or resources, data exposure, copied work product, a conflict, or a performance issue. Do not infer any of these from AI use alone.
- Explain the allegation. Tell the employee what conduct is being reviewed and which rule may apply. Give them a meaningful chance to explain the circumstances, including whether the tool or activity was approved.
- Preserve only relevant records. Follow established security and records processes, limit access to people who need it, and avoid collecting unrelated personal information. If company data may have been entered into an unapproved service, use the organization’s incident-response process to assess and contain exposure.
- Separate the issues. Assess outside work, data handling, resource use, conflicts, and performance on their own evidence. Poor performance does not by itself prove moonlighting; using AI for a second job does not by itself prove that primary-job performance suffered.
- Apply standards consistently. Compare the case with similar situations and account for the employee’s role, policy notice, evidence quality, actual harm, and any relevant mitigating facts. Document the reasons for the outcome.
How should HR protect data without over-monitoring?
Start with established security controls rather than broad surveillance. If an employee used an unapproved AI service, determine what data was exposed, restrict or remediate inappropriate access through normal security procedures, and provide an approved route for legitimate work-related AI use. Tell employees which information must not be entered into unapproved tools and how to ask for an exception.
Monitoring has its own legal and employee-trust risks. UK Information Commissioner’s Office guidance says employers should define a clear purpose and lawful basis, use the least intrusive effective means, explain what is monitored and why, and take care with the stronger privacy expectations associated with homeworking. The ICO’s employment-monitoring guidance is UK-specific and is under review following the Data (Use and Access) Act. A notice to employees does not by itself make excessive monitoring lawful.
AI-generated monitoring or performance recommendations should not make consequential decisions on their own. Under ICO guidance, human involvement should be meaningful: a competent reviewer checks and interprets the recommendation, considers other relevant information, and has authority to depart from it. Treat automated flags, scores, and prompt logs as material to verify—not as a verdict.
Rank #4
Can an employer discipline an employee for moonlighting?
There is no jurisdiction-neutral answer. Whether outside work can be restricted or disciplined depends on the applicable law, contract and workplace rules, the employee’s duties, and the facts. Confidentiality, intellectual property, working-time rules, privacy requirements, union agreements, and conflict-of-interest obligations may all matter. The available evidence does not establish that moonlighting or AI-assisted side work is universally prohibited.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Before imposing discipline, identify the breached rule and the evidence supporting it, confirm that the employee had appropriate notice, and check whether comparable cases have been handled consistently. Consider the seriousness of the conduct, any exposure of confidential or regulated information, use of paid time or employer resources, actual conflict or performance impact, and the privacy intrusiveness of how evidence was obtained. Consult local employment and privacy counsel when the governing rules or consequences are uncertain.
What should an AI and outside-work policy say?
A useful policy is specific enough for employees and managers to apply. It should address:
- Which AI tools are approved for work, and how employees can request access to others.
- What confidential, personal, client, or regulated data must not be entered into unapproved tools.
- Who is responsible for checking AI outputs, and how material AI assistance should be disclosed or attributed where relevant.
- How outside work and conflicts are defined, what must be disclosed, and how employees can seek approval or guidance.
- Whether and how company time, devices, accounts, systems, or work product may be used for outside activity.
- How to report accidental data exposure, a suspected conflict, or uncertainty about a tool or side project.
- What workplace monitoring is conducted, for what purpose, and how information may inform decisions.
Train managers to distinguish an unauthorized tool from a conflict or performance problem, and to route suspected data incidents through security rather than making assumptions about motive. NIST’s AI Risk Management Framework and Generative AI Profile are voluntary resources for organizational risk management; they are not employment laws or substitutes for local legal advice.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
