My advice to anyone running a company atm - don't let your IT security folks do this. They will initially want to, and it will be a huge mistake.
[1]: https://www.reuters.com/legal/us-supreme-court-rejects-compu...
I do wonder if there will one day be communications formatters like what Prettier does for code, where no matter the style of writing going in, it will come out consistent. But until there are 'communications rewriters' to match a predefined company tone and style guide it seems like anyone's use of a tool like this would by ad-hoc.
What do you think the most sensible policy is to have right now, and why?
People have tasted the fruit of the tree of (machine) knowledge.
They're not going to let a simple webfilter stop them.
It doesn't matter if they have a checkbox saying 'we totally won't save your information we promise', no one should be shoveling confidential data into ChatGPT and if people keep doing so then they're a security risk.