Privacy is a habit
One careless paste can outlive the chat tab.
The trap
Enthusiasm for new tools is healthy. Casual data sharing is not. Chat tabs close. Logs, training opt-ins, screenshots, and “helpful” browser extensions often do not.
One careless paste can outlive the session: customer names, ticket bodies, passwords, health details, pricing, or internal strategy.
Treat sensitive data as radioactive
- Minimize - Can you ask the question with roles and redactions instead of real records?
- Mask - Replace names, IDs, and unique details before the prompt leaves your machine.
- Keep offline - Some jobs never belong in a general-purpose chat. Use approved tools or none.
- Assume logs - Unless you have a written exception, assume the prompt is stored somewhere you do not control.
Practice (10 minutes)
- Write a personal never paste list of five items (examples: passwords, PHI, full ticket dumps, private keys, unreleased pricing).
- Open your last three AI chats. Count how many would fail that list.
- Redact one real prompt you would reuse. Save the redacted version as your template.
- For the next work ask, say the three paste checks out loud before you hit send (see Verify before you paste).
At work this week
Put your never-paste list on a sticky note near the monitor you actually use. Habits fail when they live only in a doc you never open. Enthusiasm for tools stays; the sticky note is the boundary.
Reflection
Which item on your never-paste list are you most tempted to violate when you are in a hurry? What friction will you add so hurry cannot win?
See also
- Field Guide: Privacy and judgment
- Field Guide: Verify
- Pulse: Verify before you paste
- Checklist: AI craft principles