What can I safely share with a chatbot?
Check what you are entitled to share before uploading it. Your organisation’s rules, the service’s settings and other people’s information all matter.
Decide what you are entitled to share before you paste it. Consider who the information concerns, your organisation’s rules and the service you are using, including its terms and settings.
Consider the law that applies where you work as well. In the EU, that includes GDPR obligations when handling personal data and any AI Act requirements relevant to your role and use of the system. These address different obligations; the AI Act does not replace GDPR. For work involving other people’s data, check your organisation’s approved process and ask its privacy or legal lead when you are unsure.
Often you can explain the task with fewer identifying details. Removing a name does not necessarily make the information anonymous. A chatbot’s willingness to accept a file tells you very little about whether you should upload it.
— Martin Poliačik