SpotTheLeak Day 3
"Never paste Confidential HR Data into any AI Prompts."
Vulnerability Focus
Scrub off any confidential HR Data before you paste them to AI prompts.
In this #SpotTheLeak episode we focus on some of the most sensitive data a company holds: HR records. Salaries, performance reviews, disciplinary notes, health details — pasting any of it into an AI prompt turns a private matter into an external one.
Why HR data is a special case
A leak here isn't just a technical problem; it's a legal and human one. Compensation and health information carry strict protections, and exposure breaks the trust employees place in you.
Keep HR data where it belongs
- Keep personnel information inside your dedicated HR systems.
- Anonymize and aggregate before using AI for any people analytics.
- Never paste an individual's record into a general-purpose assistant.
Confidential HR data should never travel through a public prompt. When AI does touch people data, route it through a secure gateway with redaction so sensitive fields are stripped before they leave your control.
Share this insight