Generative AI tools are now embedded in the daily workflows of many businesses. Employees use these tools to help draft emails, screen job applicants, generate marketing copy and analyze data. However, many business owners, executives and employees still have a limited understanding of the legal and privacy risks that can arise with every prompt. Developing a concise framework for identifying AI-related exposure can help organizations prevent violations before they occur.