When AI Policies Fail in Practice: Shadow AI as a Structural Policy–Practice Governance Misalignment
DOI:
https://doi.org/10.51903/jmi.v5i2.327Keywords:
AI Governance, Adaptive Governance, Policy-Practice Gap, Shadow AI, Sociotechnical SystemsAbstract
The widespread adoption of Artificial Intelligence (AI) has led organizations to establish formal governance frameworks aimed at mitigating ethical, legal, and operational risks. Despite these efforts, AI governance frequently fails in practice, as evidenced by the growing prevalence of Shadow AI the unsanctioned use of AI tools by employees. Existing scholarly and practitioner discourses predominantly frame this phenomenon as a compliance failure or security vulnerability, thereby emphasizing stricter controls and enhanced employee training as primary remedies. This conceptual study challenges that prevailing view by arguing that Shadow AI represents a structural manifestation of policy–practice misalignment rather than a problem of individual deviance. The study develops a diagnostic framework that identifies three constitutive dimensions of misalignment: temporal gaps (mismatches between governance processes and operational speed), utility gaps (misalignment between sanctioned tools and task-specific needs), and autonomy–control gaps (tensions between professional discretion and standardization). Drawing on a theory-driven conceptual methodology integrating sociotechnical systems theory with policy–practice analysis, and illustrated through structured synthetic organizational scenarios, the study demonstrates how governance designs that overlook the realities of situated work systematically generate Shadow AI practices. The analysis further suggests that adaptive governance models incorporating structured flexibility such as curated AI tool marketplaces and expedited approval pathways are theoretically more effective than highly rigid governance regimes. The primary contribution lies in advancing a practice-aware AI governance model that reframes Shadow AI as a diagnostic signal of systemic design flaws and provides a foundation for more legitimate and responsive AI governance.
References
Andersson, J., Hellsmark, H., & Sandén, B. (2021). The outcomes of directionality: Towards a morphology of sociotechnical systems. Environmental Innovation and Societal Transitions, 40, 108–131. https://doi.org/10.1016/j.eist.2021.06.008
Attard-Frost, B., Brandusescu, A., & Lyons, K. (2024). The governance of artificial intelligence in Canada: Findings and opportunities from a review of 84 AI governance initiatives. Government Information Quarterly, 41(2). https://doi.org/10.1016/j.giq.2024.101929
Batool, A., Zowghi, D., & Bano, M. (2025). AI governance: a systematic literature review. AI and Ethics, 5(3), 3265–3279. https://doi.org/10.1007/s43681-024-00653-w
Birkstedt, T., Minkkinen, M., Tandon, A., & Mäntymäki, M. (2023). AI governance: themes, knowledge gaps and future agendas. In Internet Research (Vol. 33, Issue 7, pp. 133–167). Emerald Publishing. https://doi.org/10.1108/INTR-01-2022-0042
Chung, C., Kim, J., Sovacool, B. K., Griffiths, S., Bazilian, M., & Yang, M. (2023). Decarbonizing the chemical industry: A systematic review of sociotechnical systems, technological innovations, and policy options. In Energy Research and Social Science (Vol. 96). Elsevier Ltd. https://doi.org/10.1016/j.erss.2023.102955
Daly, A., Hagendorff, T., Hui, L., Mann, M., Marda, V., Wagner, B., & Wang, W. W. (2021). AI, Governance and Ethics: Global Perspectives. In Constitutional Challenges in the Algorithmic Society (pp. 182–201). Cambridge University Press. https://doi.org/10.1017/9781108914857.010
Furszyfer Del Rio, D. D., Sovacool, B. K., Foley, A. M., Griffiths, S., Bazilian, M., Kim, J., & Rooney, D. (2022a). Decarbonizing the ceramics industry: A systematic and critical review of policy options, developments and sociotechnical systems. In Renewable and Sustainable Energy Reviews (Vol. 157). Elsevier Ltd. https://doi.org/10.1016/j.rser.2022.112081
Furszyfer Del Rio, D. D., Sovacool, B. K., Foley, A. M., Griffiths, S., Bazilian, M., Kim, J., & Rooney, D. (2022b). Decarbonizing the glass industry: A critical and systematic review of developments, sociotechnical systems and policy options. In Renewable and Sustainable Energy Reviews (Vol. 155). Elsevier Ltd. https://doi.org/10.1016/j.rser.2021.111885
Ingstrup, M. B., Aarikka-Stenroos, L., & Adlin, N. (2021). When institutional logics meet: Alignment and misalignment in collaboration between academia and practitioners. Industrial Marketing Management, 92, 267–276. https://doi.org/10.1016/j.indmarman.2020.01.004
Keudel, O., & Huss, O. (2024). Polycentric governance in practice: the case of Ukraine’s decentralised crisis response during the Russo-Ukrainian war. Journal of Public Finance and Public Choice, 39(1 Special Issue), 10–35. https://doi.org/10.1332/25156918Y2023D000000002
Kim, J., Sovacool, B. K., Bazilian, M., Griffiths, S., Lee, J., Yang, M., & Lee, J. (2022). Decarbonizing the iron and steel industry: A systematic review of sociotechnical systems, technological innovations, and policy options. In Energy Research and Social Science (Vol. 89). Elsevier Ltd. https://doi.org/10.1016/j.erss.2022.102565
Leong, C., & Howlett, M. (2022). Policy Learning, Policy Failure, and the Mitigation of Policy Risks: Re-Thinking the Lessons of Policy Success and Failure. Administration and Society, 54(7), 1379–1401. https://doi.org/10.1177/00953997211065344
Liscio, E., Lera-Leri, R., Bistaffa, F., Dobbe, R. I., Jonker, C. M., Lopez-Sanchez, M., Rodriguez-Aguilar, J. A., & Murukannaiah, P. K. (2023). Value Inference in Sociotechnical Systems: Blue Sky Ideas Track. www.ifaamas.org
Mäntymäki, M., Minkkinen, M., Birkstedt, T., & Viljanen, M. (2022). Defining organizational AI governance. AI and Ethics, 2(4), 603–609. https://doi.org/10.1007/s43681-022-00143-x
Marpu, R. P., McNamara, K. J., & Gupta, P. (2025). The AI Shadow War: SaaS vs. Edge Computing Architectures. http://arxiv.org/abs/2507.11545
Martin, J., Ellström, P. E., Wallo, A., & Elg, M. (2024). Bridging the policy-practice gap: a dual challenge of organizational learning. Learning Organization, 32(7), 18–34. https://doi.org/10.1108/TLO-05-2023-0079
Nugroho, S. A. A., & Wibowo, A. (2025). Evaluating Digital Transformation within Integration Limitations using Desk-Based Analytical Case Study. Journal of Technology Informatics and Engineering, 4(2), 289–299. https://doi.org/10.51903/jtie.v4i2.365
Puthal, D., Mishra, A. K., Mohanty, S. P., Longo, A., & Yeun, C. Y. (2025). Shadow AI: Cyber Security Implications, Opportunities and Challenges in the Unseen Frontier. SN Computer Science, 6(5). https://doi.org/10.1007/s42979-025-03962-x
Reuel, A., Bucknall, B., Casper, S., Fist, T., Soder, L., Aarne, O., Hammond, L., Ibrahim, L., Chan, A., Wills, P., Anderljung, M., Garfinkel, B., Heim, L., Trask, A., Mukobi, G., Schaeffer, R., Baker, M., Hooker, S., Solaiman, I., … Trager, R. (2025). Open Problems in Technical AI Governance. http://arxiv.org/abs/2407.14981
Roberts, H., Hine, E., Taddeo, M., & Floridi, L. (2024). Global AI governance: barriers and pathways forward. International Affairs, 100(3), 1275–1286. https://doi.org/10.1093/ia/iiae073
Schmitt, L. (2022). Mapping global AI governance: a nascent regime in a fragmented landscape. AI and Ethics, 2(2), 303–314. https://doi.org/10.1007/s43681-021-00083-y
Sovacool, B. K., Bazilian, M., Griffiths, S., Kim, J., Foley, A., & Rooney, D. (2021). Decarbonizing the food and beverages industry: A critical and systematic review of developments, sociotechnical systems and policy options. In Renewable and Sustainable Energy Reviews (Vol. 143). Elsevier Ltd. https://doi.org/10.1016/j.rser.2021.110856
Steinhall, N., Mcpettit, R., Bond, J., Parks, M., Khan, M., Sharfarz, D., Cabrera, L., & Cabrera, D. (2023). June 2023 Wicked Solutions for Wicked Problems Wicked Solutions for Wicked Problems: Misalignment in Public Policy Wicked Solutions for Wicked Problems.
Troje, D. (2021). Policy in practice: social procurement policies in the swedish construction sector. Sustainability (Switzerland), 13(14). https://doi.org/10.3390/su13147621
Waters-Lynch, J., Allen, D. W. E., Potts, J., & Berg, C. (2025). Shadow user innovation: governing covert generative-AI use for dynamic-capability renewal. Innovation: Organization and Management. https://doi.org/10.1080/14479338.2025.2519546
Whiteside, H. L. (2021). Misalignment Between Teaching And Learning.
Yu, J., Yu, Y., Wang, X., Lin, Y., Yang, M., Qiao, Y., & Wang, F.-Y. (2024). The Shadow of Fraud: The Emerging Danger of AI-powered Social Engineering and its Possible Cure. http://arxiv.org/abs/2407.15912
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Mia Wilson, Ethan Moore
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
