How to Use AI Safely at Work: A Practical Privacy Checklist

AI assistants can draft emails, summarize reports, clean up spreadsheets, and brainstorm ideas in seconds. It is no surprise they are showing up in every workplace. But every time you paste information into an AI tool, you are sharing it with a third-party service. Here is how to use AI productively without putting your company, your clients, or yourself at risk.

Why AI privacy matters

• Your data leaves your control. Prompts are sent to the provider’s servers and may be stored for a period of time.
• It may be used for training. Depending on the service and your settings, conversations can be used to improve future models. Business and enterprise plans typically offer stronger protections, but consumer accounts vary.
• People may review it. Some providers allow limited human review of conversations for safety or quality purposes.
• Legal obligations still apply. Privacy laws, client contracts, and confidentiality agreements don’t stop applying because you used a chatbot.

Never paste these into a public AI tool

• Passwords, API keys, access tokens, or security codes
• Customers’ personal data — names with contact details, ID numbers, health or financial information
• Payment card or bank account numbers
• Confidential contracts, unreleased financials, or merger plans
• Proprietary source code, unless your company has approved the tool
• Anything covered by a non-disclosure agreement

The workplace AI checklist

1. Check your company’s AI policy. Many organizations now list approved tools and forbidden uses. If there’s no policy, ask before using AI on work data.
2. Use business accounts where possible. Team and enterprise plans usually come with data-protection commitments that consumer accounts don’t.
3. Review your privacy settings. Look for options controlling chat history and whether your data can be used for training, and set them deliberately.
4. Anonymize before you paste. Replace names with “Client A”, remove emails and phone numbers, and round sensitive figures. The AI can usually do the task just as well.
5. Share the minimum. Need help with one paragraph? Paste one paragraph, not the whole confidential report.
6. Be careful with connected apps. AI tools that connect to your email, calendar, or files are powerful. Grant only the access you need, and review what each integration can do.
7. Verify before you send. AI can make factual errors — read about AI hallucinations. You are responsible for anything you send or publish.
8. Be transparent when it matters. If clients, readers, or your employer expect to know when AI was used, tell them.
9. Watch for AI-powered scams. Criminals use AI to write convincing phishing emails and even clone voices. Verify unusual payment or password requests through a second channel.

Safe ways to get big wins

Plenty of high-value uses involve no sensitive data at all:

• Drafting and polishing generic emails and announcements
• Explaining unfamiliar concepts or industry jargon
• Creating templates, checklists, and meeting agendas
• Brainstorming names, headlines, and campaign ideas
• Writing formulas for spreadsheets using dummy data
• Practicing a presentation or difficult conversation

To get better results from these tasks, try the techniques in our prompt writing guide.

The rule of thumb

Before pasting anything, ask: “Would I be comfortable if this text appeared on a public notice board?” If the answer is no, anonymize it, trim it, or use an approved company tool. Follow that one rule and you’ll avoid most AI privacy mistakes.