Yes, there is real exposure, but it’s manageable. The main risks come from sharing personal or sensitive data without safeguards. SMEs should:

• avoid uploading personal data unless necessary;

• understand how tools handle data;

• set basic internal rules for AI use.

This is less about avoiding AI and more about using it thoughtfully and transparently.

Yes. SMEs can be GDPR-liable if they input personal data into AI tools without safeguards. Risks are lower if data is anonymized, enterprise contracts are used, and staff follow clear AI usage rules.