What Not to Paste Into ChatGPT at Work: Sensitive Data and AI

ChatGPT is useful at work. But the ease of pasting something into the chat box can tempt you to share information you shouldn't. Once you send something to ChatGPT, it's not just your secret anymore—it's in OpenAI's systems, potentially used for model training, and beyond your control.

This guide covers what types of information should never go into ChatGPT at work, and why it matters.

The Fundamental Problem

When you use ChatGPT through the web interface or free mobile app, you're sending data to OpenAI's servers. Unless you have a paid business agreement with specific privacy terms, OpenAI reserves the right to:

• Store your conversations
• Use your inputs to train future models
• Have conversations reviewed by human trainers
• Share data with contractors or service providers

This creates a disclosure risk: any sensitive information you share might eventually be seen by people you didn't intend to show it to.

Beyond privacy, there's compliance risk. If your industry has data protection regulations—GDPR in Europe, CCPA in California, HIPAA for healthcare, or financial regulations—sharing certain data with ChatGPT might violate those requirements.

What Should Never Go Into ChatGPT

1. Customer or Client Information

Why: If you share customer data with ChatGPT and a customer later discovers this, you've breached their privacy. Depending on your jurisdiction and industry, this could violate GDPR, contractual obligations or industry regulations.

Safe alternative: Describe the situation in general terms. Instead of pasting a customer email, summarise it: "How should I respond to a customer who's frustrated about a delayed delivery?"

2. Employee Information

Why: Employee data is sensitive. Sharing it without consent is a privacy violation and a trust issue with your team. Performance or health information is particularly sensitive.

Safe alternative: Anonymise and generalise. "How should I handle a performance conversation with an employee who's consistently late?" works; specific names and details don't.

3. Financial Information

Why: Financial information is confidential. Sharing it exposes your organisation to competitive risk and violates basic confidentiality. If it's financial planning involving client data, that's a double risk.

Safe alternative: Work with anonymised or hypothetical numbers. "What's the best way to forecast Q4 revenue if historical growth has been 5% per quarter?" works without sharing real figures.

4. Authentication Credentials

Why: If you paste credentials into ChatGPT, assume they're compromised. Someone could use them to access your systems or impersonate your account.

What to do: If you accidentally paste a credential, immediately regenerate or revoke it. Don't assume it's secure.

5. Proprietary or Trade Secret Information

Why: Once you share proprietary information with ChatGPT, you've lost control of it. It could be used to train a model that your competitors access. Your competitive advantage is gone.

Safe alternative: Describe the problem without revealing the solution. "How can we optimise a search algorithm?" is safer than pasting your actual algorithm.

6. Medical or Health Information

Why: Health information is highly regulated (HIPAA, GDPR if in EU). Sharing it without consent is illegal in most jurisdictions. Even anonymised health data can often be re-identified.

Safe alternative: If you work in healthcare, ask your compliance team what tools are approved for health-related work. Most likely, ChatGPT is not on that list for patient information.

7. Legal or Confidential Documents

Why: Legal communications are privileged. Sharing them with a third party (even ChatGPT) could waive privilege and harm your legal position. Confidential contracts contain proprietary terms you shouldn't disclose.

Safe alternative: Ask your legal team. If you need AI to help with legal work, they'll tell you what tools (if any) are appropriate.

8. Government or Classified Information

Why: This is illegal. Don't do it.

The Test: Would You Email This to a Stranger?

Here's a simple rule: If you wouldn't be comfortable copying the information into an email and sending it to a stranger on the internet, don't paste it into ChatGPT.

ChatGPT isn't a closed system. Your information could be seen by people outside your organisation. Treat it that way.

What About Your Company's Data Policy?

Even if something technically could go into ChatGPT, check your company's policy first. Many organisations now have specific rules about which AI tools employees can use and what data can be shared.

If your company hasn't released an AI policy yet, that's changing. Raise the question with your manager or compliance team. Using AI at work without guidance on what's appropriate is a risk for both you and your organisation.

When in Doubt: Ask Permission

If you're unsure whether something is safe to share with ChatGPT:

1. Ask your manager or compliance team
2. Anonymise and generalise the information
3. Don't paste it and find another solution

It's better to ask and get guidance than to make a mistake that damages your organisation or your professional reputation.