Healthcare IT folks—how do you handle staff using consumer AI tools?

Genuinely curious how healthcare orgs are approaching this.
Staff are obviously beginning to use ChatGPT, Claude, etc. because they're useful.

But there's a real risk of PHI ending up in prompts, even accidentally.
Are you blocking these tools completely? Providing approved alternatives? Just doing training and hoping for the best?

Feels like one of those things where the technology moved faster than policy could keep up. What's actually working right now?