Before You Paste

Build a sensitive-context checklist before giving text, files, images, or records to an AI system.

Plan for this page

Apply your judgment to a real situation and keep a reusable result.

You will leave with: Copy the rules that apply to this task before pasting anything.
Time: 8 min
Before you begin: Use this when a useful request may include personal, confidential, regulated, credential, student, patient, employer, or other third-party information.
Do this now: Choose one real case, then answer in order without skipping a question.

When to use it

Answer for the actual provider, account, purpose, and data—not for AI in general. Choose the rule you can defend before processing begins.

What you will make

Purpose limitation prevents useful work from becoming unlimited collection.

Possession of a file is not the same as permission for a new purpose or provider.

Retention, training use, region, access, and organizational controls can change the decision.

A lower-identification route can preserve usefulness while reducing exposure.

Consequences determine whether convenience is worth the residual risk.

Reusable result

Copy the rules that apply to this task before pasting anything.

This tool cannot determine applicable law, contractual authority, provider retention, security, consent, or whether de-identification is sufficient.

Do not enter the real material here. Describe its category only and complete any required organizational or legal review elsewhere.

Sources and scope

Established

NIST Privacy FrameworkU.S. National Institute of Standards and Technology

Supports purpose, data-processing, privacy-risk, lifecycle, governance, and control analysis; it is not jurisdiction-specific legal advice.

AI Risk Management FrameworkU.S. National Institute of Standards and Technology

Supports contextual mapping, risk, governance, human oversight, monitoring, and accountability; it is voluntary guidance, not certification.

Loading page content...

…