Minimize data by default
Decide what can be sent to the model, how to redact PII and who has access to prompts/logs.
AI and sensitive data: privacy, security and compliance basics
What to decide before the first pilot: data minimization, PII redaction, access control, logging and retention.
May 6, 2026