0.7.9 Information You Should Not Share With AI

Useful AI Input Does Not Mean Maximum AI Input

A generative AI system can often give a better response when it receives useful context.

That does not mean you should provide every piece of information available to you.

A responsible rule is:

Share only the information needed for the task and permitted for the tool you are using.

This idea is called data minimization.

Do Not Share Passwords or Authentication Secrets

Never place credentials into an AI prompt.

Examples include:

An AI system does not need your password to help you write an email, explain code, or organize notes.

If a prompt seems to require a credential, stop and reconsider the task.

Protect Personal and Confidential Information

Be careful with information that belongs to you or someone else.

Examples can include:

Whether a particular system is approved for a particular kind of information depends on the rules of your institution or workplace.

When in doubt, use the approved policy and tool guidance.

Remove Unnecessary Identifiers

Suppose you want AI help rewriting a technical support message.

The original note says:

Student Jordan Smith, ID 1234567, cannot open the application.

The student ID is probably not needed for a writing task.

A minimized version might say:

A student cannot open the application.

If identity is not needed for the task, remove it.

Use Representative or Fictional Data When Possible

Suppose you need help understanding a spreadsheet formula.

Instead of uploading a real private employee list, you can often create a small example such as:

Employee Hours
Person A 8
Person B 6

The formula question can be answered without exposing the original records.

Technical learning often works well with fictional or de-identified examples.

Check the Tool's Approved Use

Different AI services can have different:

Do not assume that because one AI system is approved for a task, every AI system is approved for the same data.

Use the tools and practices authorized by the organization responsible for the information.

A Public Prompt Is Not a Private Notebook

It can be easy to treat an AI chat like a personal scratchpad.

Instead, think before pasting.

Ask:

Would I be permitted to send this information to an external service?

Does the system need this detail to complete the task?

Can I remove or replace identifying information?

If the answer suggests the information is unnecessary or restricted, do not include it.

Screenshots Can Contain Sensitive Information

A screenshot can accidentally expose:

Before sharing an image with an AI tool, inspect the whole image.

Crop or remove information that is not needed and that you are permitted to remove.

Source Code Can Also Be Sensitive

Code may contain:

Do not paste code into an AI system simply because it is "only code."

Use the same data-minimization question:

What is the smallest permitted example that demonstrates the problem?

Personal Convenience Does Not Override Policy

You may find a tool helpful.

That does not automatically mean you are allowed to upload institutional, employer, or client information to it.

Follow the rules that govern the information.

Responsible AI use includes knowing when not to use AI for a particular input.

A Simple Decision Before Sharing

Before placing information into an AI system, ask:

  1. Is this information necessary for the task?
  2. Am I allowed to share it with this tool?
  3. Can I remove identifying or confidential details?
  4. Can I use fictional or de-identified data instead?
  5. Does the input contain credentials or secrets that should never be shared?

If the task can be completed with less data, use less data.