All packs
Data safety · Every AI tool

Know your data

Classify data before you paste it anywhere. The same text can be fine in one tool and forbidden in another.

Start: Data levels

About this pack

Know your data teaches you to sort information by how sensitive it is before it goes into any AI tool. Whether you can paste something depends on the data level, whether the tool is approved for it, and the account you're using. Contracts and privacy law can add rules. You'll also find personal data hiding in messy inputs and learn to share less while getting the same help.

Best for: Anyone who uses AI tools for work or study, including employees, freelancers, small business owners and students.

Good for

  • Sorting data into levels before you paste or upload it
  • Spotting names, IDs and secrets hidden in screenshots, threads, logs and exports
  • Rewriting prompts so they keep the task and drop the personal details
  • Choosing safer routes like totals, synthetic data or AI inside an approved tool

Where people slip

  • Assuming text that's fine in one tool or account is fine in every one
  • Missing a tax ID or password buried in a quoted reply or a log line
  • Thinking pseudonymized data is anonymous. It can still be personal data
  • Uploading a whole export when a few columns would do
What data can I put into ChatGPT or other AI tools?

It depends on the data level, whether the tool is approved for that level, and the account you use. Public information is usually fine. Personal or confidential data needs an approved tool on the right account. Passwords and keys never go in.

What counts as personal data?

Under GDPR, any information about a person who can be identified directly or indirectly. That covers a name or email. It also covers details that point to one person, like a job title only one person holds.

Is pseudonymized data still personal data?

Under GDPR, yes, if it can be linked back to a person with extra information. Only truly anonymous data falls outside data protection rules. Swapping names for codes lowers the risk but doesn't remove it.

What should I do if I pasted something I shouldn't have?

Tell whoever owns the data, such as your security team, manager or client. If it was a password or key, rotate it right away. Deleting the chat doesn't guarantee the data is gone.

Milestone 1

Know your data levels

Classify data and decide whether it may go into a given tool and account.

0 of 2 lessons complete
Data levels3 exercises
Minimize and de-identify2 exercises
Milestone 2

Spot data in messy inputs

Find personal, confidential and secret data hiding in screenshots, threads, logs and exports.

0 of 2 lessons complete
Screenshots and pasted threads5 exercises
Logs, exports and spreadsheets5 exercises
Milestone 3

Share less, get the same help

Pseudonymize, aggregate and use synthetic data or approved in-place tools so sensitive data stays put.

0 of 2 lessons complete
Pseudonymize, anonymize, aggregate5 exercises
Safe alternatives5 exercises