L1-M3 / lesson 1 of 2

Know what information you are sharing

A fictional payroll spreadsheet is proposed as input to an assistant.

10–15 min · 0/4 steps complete

Start here / A workplace decision

Removing a name is not enough

A fictional payroll spreadsheet is proposed as input to an assistant.

Names have been removed, but email addresses and unique job titles remain.

Before you read / Think it through

In “Removing a name is not enough”, what would you check or do first?

Pause and form your answer, then compare the reasoning. This reflection is not scored.

Compare the reasoning

The records may still identify people. Classify the whole dataset.

The ideas below give you a method for this decision. Then work through the rest of this case and try the decisions yourself.

Part 1 of 4 Learn the ideas

Choose a topic0 of 5 read

Information classes

Public, internal and confidential are organisational labels.

Personal data identifies a person directly or indirectly.

In the workplace

A published employee email may still be personal data. Public availability does not remove every restriction on processing.

Remember this

One file can belong to several categories.

The workplace case

YOUR CASE / DATA AND CONFIDENTIALITY

Leo pastes a client spreadsheet into an unapproved assistant. He removed names but retained email addresses, salary figures and unique job titles. The tool offers a public sharing link. Leo notices the mistake ten minutes later.

Quick reference / five key ideas

Information classes: One file can belong to several categories.
Sensitive personal data: Other confidentiality duties may still apply.
Where inputs go: Check the actual service and account configuration.
Approved tools: Check connected tools and sharing features too.
Minimisation: Consider a non-AI or local method when appropriate.