0.7.9 Information You Should Not Share With AI

Useful AI Input Does Not Mean Maximum AI Input

A generative AI system can often give a better response when it receives useful context.

That does not mean you should provide every piece of information available to you.

A responsible rule is:

Share only the information needed for the task and permitted for the tool you are using.

This idea is called data minimization.

Do Not Share Passwords or Authentication Secrets

Never place credentials into an AI prompt.

Examples include:

  • passwords;
  • one-time authentication codes;
  • recovery codes;
  • private keys;
  • security answers;
  • access tokens.

An AI system does not need your password to help you write an email, explain code, or organize notes.

If a prompt seems to require a credential, stop and reconsider the task.

Protect Personal and Confidential Information

Be careful with information that belongs to you or someone else.

Examples can include:

  • private contact information;
  • student records;
  • employee records;
  • financial information;
  • confidential business information;
  • private account information;
  • unpublished work that you are not authorized to share.

Whether a particular system is approved for a particular kind of information depends on the rules of your institution or workplace.

When in doubt, use the approved policy and tool guidance.

Remove Unnecessary Identifiers

Suppose you want AI help rewriting a technical support message.

The original note says:

The student ID is probably not needed for a writing task.

A minimized version might say:

If identity is not needed for the task, remove it.

Use Representative or Fictional Data When Possible

Suppose you need help understanding a spreadsheet formula.

Instead of uploading a real private employee list, you can often create a small example such as:

Employee Hours
Person A 8
Person B 6

The formula question can be answered without exposing the original records.

Technical learning often works well with fictional or de-identified examples.

Check the Tool's Approved Use

Different AI services can have different:

  • privacy terms;
  • data-retention behavior;
  • administrative controls;
  • institutional approvals.

Do not assume that because one AI system is approved for a task, every AI system is approved for the same data.

Use the tools and practices authorized by the organization responsible for the information.

A Public Prompt Is Not a Private Notebook

It can be easy to treat an AI chat like a personal scratchpad.

Instead, think before pasting.

Ask:

If the answer suggests the information is unnecessary or restricted, do not include it.

Screenshots Can Contain Sensitive Information

A screenshot can accidentally expose:

  • usernames;
  • email addresses;
  • browser tabs;
  • account numbers;
  • notifications;
  • authentication information.

Before sharing an image with an AI tool, inspect the whole image.

Crop or remove information that is not needed and that you are permitted to remove.

Source Code Can Also Be Sensitive

Code may contain:

  • credentials;
  • internal server names;
  • customer information;
  • proprietary algorithms;
  • configuration secrets.

Do not paste code into an AI system simply because it is "only code."

Use the same data-minimization question:

Personal Convenience Does Not Override Policy

You may find a tool helpful.

That does not automatically mean you are allowed to upload institutional, employer, or client information to it.

Follow the rules that govern the information.

Responsible AI use includes knowing when not to use AI for a particular input.

A Simple Decision Before Sharing

Before placing information into an AI system, ask:

  1. Is this information necessary for the task?
  2. Am I allowed to share it with this tool?
  3. Can I remove identifying or confidential details?
  4. Can I use fictional or de-identified data instead?
  5. Does the input contain credentials or secrets that should never be shared?

If the task can be completed with less data, use less data.