Information relating to an identified or identifiable person, directly or through combinations of details.
Follow material in an order that builds understanding.
inAiLoading page content...
Follow material in an order that builds understanding.
inAiLoading page content...
Everyday AI · Unit 05
Plan for this page
After this unit, you should be able to
Terms you will use
These definitions prepare you for the reading; you do not need to memorize them.Information relating to an identified or identifiable person, directly or through combinations of details.
Using or sharing only what is reasonably necessary for a defined purpose.
A process intended to prevent identification; simply removing a name may be only pseudonymization or redaction, not reliable anonymity.
Names and account numbers are obvious, but combinations of workplace, location, dates, diagnoses, family events, writing samples, images, voice, or unusual circumstances may identify a person. Information can also belong to someone else or be protected by employment, school, contract, or professional duty.
Classify before sharing: public, personal, confidential, financial, health, child-related, security-related, proprietary, or otherwise restricted. Ask who controls it, who authorized the use, who may be affected, and what could happen through disclosure, reuse, error, or inference.
Start from the purpose and remove fields the task does not need. Replace names with roles, exact amounts with ranges, real records with synthetic examples, full documents with relevant excerpts, or identifying details with neutral placeholders.
Transformation is not a magic shield. Rare combinations and context can still identify people, and confidentiality obligations may persist. If the task depends on sensitive details, use an explicitly approved protected process or keep the task out of the service.
Plans, regions, settings, integrations, and contracts can change retention, access, training use, subprocessors, deletion, and administrator visibility. Read current documentation for the service you actually use rather than relying on a general statement about the brand.
Connection expands the boundary. Granting access to mail, cloud files, contacts, photos, or a microphone can expose more than one prompt. Limit scope and duration, review permissions, disconnect unused integrations, and preserve a way to delete, export, correct, or contest where available.
Interactive model
Does this task require the information, or can a smaller excerpt, placeholder, or synthetic example work?
Misconception to correct
Active checks
Explain back and transfer
Source context
AI risk-management framework useful for context and controls; it is not individual privacy advice.
Official EU context-sensitive guidance; public legal interpretation requires current jurisdiction-specific review.
Human-centred competency framework supporting ethical and responsible judgment across AI uses; adapted beyond school settings.