Pause before you paste

One-minute script

AI tools may retain, process, or expose information in ways that do not fit our intent or our organization’s rules. Before pasting anything, pause long enough to ask whether the information is public, permitted, and necessary for this task.

Try this

Remove names, identifiers, confidential details, and any context the tool does not need. Use only an approved tool and follow the rules that apply to your organization.

Ask together

What information should never leave this room?

Facilitator notes

Use a hypothetical example. Do not invite participants to name or display sensitive information during the discussion.

Source notes

The NIST Privacy Framework treats privacy risk as a consequence of systems processing data and asks organizations to manage that risk throughout the data lifecycle.