2.3: Don't trust AI with sensitive information; check the privacy policy
- Page ID
- 346961
\( \newcommand{\vecs}[1]{\overset { \scriptstyle \rightharpoonup} {\mathbf{#1}} } \)
\( \newcommand{\vecd}[1]{\overset{-\!-\!\rightharpoonup}{\vphantom{a}\smash {#1}}} \)
\( \newcommand{\dsum}{\displaystyle\sum\limits} \)
\( \newcommand{\dint}{\displaystyle\int\limits} \)
\( \newcommand{\dlim}{\displaystyle\lim\limits} \)
\( \newcommand{\id}{\mathrm{id}}\) \( \newcommand{\Span}{\mathrm{span}}\)
( \newcommand{\kernel}{\mathrm{null}\,}\) \( \newcommand{\range}{\mathrm{range}\,}\)
\( \newcommand{\RealPart}{\mathrm{Re}}\) \( \newcommand{\ImaginaryPart}{\mathrm{Im}}\)
\( \newcommand{\Argument}{\mathrm{Arg}}\) \( \newcommand{\norm}[1]{\| #1 \|}\)
\( \newcommand{\inner}[2]{\langle #1, #2 \rangle}\)
\( \newcommand{\Span}{\mathrm{span}}\)
\( \newcommand{\id}{\mathrm{id}}\)
\( \newcommand{\Span}{\mathrm{span}}\)
\( \newcommand{\kernel}{\mathrm{null}\,}\)
\( \newcommand{\range}{\mathrm{range}\,}\)
\( \newcommand{\RealPart}{\mathrm{Re}}\)
\( \newcommand{\ImaginaryPart}{\mathrm{Im}}\)
\( \newcommand{\Argument}{\mathrm{Arg}}\)
\( \newcommand{\norm}[1]{\| #1 \|}\)
\( \newcommand{\inner}[2]{\langle #1, #2 \rangle}\)
\( \newcommand{\Span}{\mathrm{span}}\) \( \newcommand{\AA}{\unicode[.8,0]{x212B}}\)
\( \newcommand{\vectorA}[1]{\vec{#1}} % arrow\)
\( \newcommand{\vectorAt}[1]{\vec{\text{#1}}} % arrow\)
\( \newcommand{\vectorB}[1]{\overset { \scriptstyle \rightharpoonup} {\mathbf{#1}} } \)
\( \newcommand{\vectorC}[1]{\textbf{#1}} \)
\( \newcommand{\vectorD}[1]{\overrightarrow{#1}} \)
\( \newcommand{\vectorDt}[1]{\overrightarrow{\text{#1}}} \)
\( \newcommand{\vectE}[1]{\overset{-\!-\!\rightharpoonup}{\vphantom{a}\smash{\mathbf {#1}}}} \)
\( \newcommand{\vecs}[1]{\overset { \scriptstyle \rightharpoonup} {\mathbf{#1}} } \)
\( \newcommand{\vecd}[1]{\overset{-\!-\!\rightharpoonup}{\vphantom{a}\smash {#1}}} \)
\(\newcommand{\avec}{\mathbf a}\) \(\newcommand{\bvec}{\mathbf b}\) \(\newcommand{\cvec}{\mathbf c}\) \(\newcommand{\dvec}{\mathbf d}\) \(\newcommand{\dtil}{\widetilde{\mathbf d}}\) \(\newcommand{\evec}{\mathbf e}\) \(\newcommand{\fvec}{\mathbf f}\) \(\newcommand{\nvec}{\mathbf n}\) \(\newcommand{\pvec}{\mathbf p}\) \(\newcommand{\qvec}{\mathbf q}\) \(\newcommand{\svec}{\mathbf s}\) \(\newcommand{\tvec}{\mathbf t}\) \(\newcommand{\uvec}{\mathbf u}\) \(\newcommand{\vvec}{\mathbf v}\) \(\newcommand{\wvec}{\mathbf w}\) \(\newcommand{\xvec}{\mathbf x}\) \(\newcommand{\yvec}{\mathbf y}\) \(\newcommand{\zvec}{\mathbf z}\) \(\newcommand{\rvec}{\mathbf r}\) \(\newcommand{\mvec}{\mathbf m}\) \(\newcommand{\zerovec}{\mathbf 0}\) \(\newcommand{\onevec}{\mathbf 1}\) \(\newcommand{\real}{\mathbb R}\) \(\newcommand{\twovec}[2]{\left[\begin{array}{r}#1 \\ #2 \end{array}\right]}\) \(\newcommand{\ctwovec}[2]{\left[\begin{array}{c}#1 \\ #2 \end{array}\right]}\) \(\newcommand{\threevec}[3]{\left[\begin{array}{r}#1 \\ #2 \\ #3 \end{array}\right]}\) \(\newcommand{\cthreevec}[3]{\left[\begin{array}{c}#1 \\ #2 \\ #3 \end{array}\right]}\) \(\newcommand{\fourvec}[4]{\left[\begin{array}{r}#1 \\ #2 \\ #3 \\ #4 \end{array}\right]}\) \(\newcommand{\cfourvec}[4]{\left[\begin{array}{c}#1 \\ #2 \\ #3 \\ #4 \end{array}\right]}\) \(\newcommand{\fivevec}[5]{\left[\begin{array}{r}#1 \\ #2 \\ #3 \\ #4 \\ #5 \\ \end{array}\right]}\) \(\newcommand{\cfivevec}[5]{\left[\begin{array}{c}#1 \\ #2 \\ #3 \\ #4 \\ #5 \\ \end{array}\right]}\) \(\newcommand{\mattwo}[4]{\left[\begin{array}{rr}#1 \amp #2 \\ #3 \amp #4 \\ \end{array}\right]}\) \(\newcommand{\laspan}[1]{\text{Span}\{#1\}}\) \(\newcommand{\bcal}{\cal B}\) \(\newcommand{\ccal}{\cal C}\) \(\newcommand{\scal}{\cal S}\) \(\newcommand{\wcal}{\cal W}\) \(\newcommand{\ecal}{\cal E}\) \(\newcommand{\coords}[2]{\left\{#1\right\}_{#2}}\) \(\newcommand{\gray}[1]{\color{gray}{#1}}\) \(\newcommand{\lgray}[1]{\color{lightgray}{#1}}\) \(\newcommand{\rank}{\operatorname{rank}}\) \(\newcommand{\row}{\text{Row}}\) \(\newcommand{\col}{\text{Col}}\) \(\renewcommand{\row}{\text{Row}}\) \(\newcommand{\nul}{\text{Nul}}\) \(\newcommand{\var}{\text{Var}}\) \(\newcommand{\corr}{\text{corr}}\) \(\newcommand{\len}[1]{\left|#1\right|}\) \(\newcommand{\bbar}{\overline{\bvec}}\) \(\newcommand{\bhat}{\widehat{\bvec}}\) \(\newcommand{\bperp}{\bvec^\perp}\) \(\newcommand{\xhat}{\widehat{\xvec}}\) \(\newcommand{\vhat}{\widehat{\vvec}}\) \(\newcommand{\uhat}{\widehat{\uvec}}\) \(\newcommand{\what}{\widehat{\wvec}}\) \(\newcommand{\Sighat}{\widehat{\Sigma}}\) \(\newcommand{\lt}{<}\) \(\newcommand{\gt}{>}\) \(\newcommand{\amp}{&}\) \(\definecolor{fillinmathshade}{gray}{0.9}\)When you ask a chatbot a question, who can read that question? Where does that text go besides your screen? What if you give the chatbot a draft of an essay that has some personal stories in it that you are fine sharing with your teacher but might not want published online? Maybe you ask a chatbot for advice on how to manage your job responsibilities and course load given your family situation. Or what if you tell it about your past experience and ask it to draft a resume? Could the AI company use that information to train its future chatbots, and could those chatbots share the information with anyone who asks about you?
To get things done online, we are constantly sharing text and images. How many of us know exactly what can happen with that data and have made conscious decisions about what to share and not share in every instance? That’s a tall order. I have certainly clicked through terms of service agreements without reading them as closely as I should.
Encouraged by teacher Autumm Caines, though, I have started to do a bit more due diligence. I’ve found it usually takes less than a minute to skim the privacy policy for an AI system. Let’s take ChatGPT as an example and look at OpenAI’s policy. Here’s an excerpt:
That’s close to a blank check. They can use our data for anything they consider “research.”
In ChatGPT’s settings, you’ll see a “Data Controls” section where you can ask them not to train future chatbots on your prompts (“Improve the model for everyone” is automatically enabled). Will they honor their pledge? If they do use our data when we’ve opted out, will they be held accountable? And even if they don’t intend to use our data, will they keep it safe in this era of data breaches?
Alternatives
If we’re not happy with a particular privacy policy or we don’t trust a company, we can look for an alternative AI system with a different policy or reputation. Apps that are built on top of the major AI text generation systems like ChatGPT, Gemini, or Claude can have their own additional data protection. Some colleges and universities may offer local versions of AI apps that their IT departments have vetted..
We can also build a habit of pausing before we share something with a chatbot and asking ourselves, “How would I feel if this became public?”
In A Blueprint For An AI Bill Of Rights For Education, Kathryn Conrad argues that students “should be able to opt out of assignments that may put your own creative work at risk for data surveillance and use without compensation.” I would agree: if your teacher is asking you to use AI, they should provide a privacy-and-data rights-protected way for you to do so or allow you to do an alternate assignment.
Can we have any impact on how our data is protected beyond our individual choices about what to share? As of 2024, federal legislation in the U.S. to protect data privacy is under consideration, modeled in part on the European Union’s General Data Protection Regulation (GDPR). In a collaborative, civic approach to privacy, we discuss and shape how data is handled through democratic processes.
Questions
- What do you want to understand better about data and privacy and AI use? What are your concerns?
- What kinds of information would you share with a chatbot (if anything) and what would you not share?
- What’s an example of something you would be tempted to share but would hesitate on?
- Do you have any opinions about democratic oversight of data privacy? Would you like to see more or less government regulation in this area?
Further reading
- How Americans View Data Privacy: The role of technology companies, AI and regulation – plus personal experiences with data breaches, passwords, cybersecurity and privacy policies from The Pew Research Center, 2023
- A Blueprint For An AI Bill Of Rights For Education by Kathryn Conrad
- Prior to (or instead of) using ChatGPT with your students by Autumn Caines
- ChatGPT Has a Big Privacy Problem, Wired, April 4, 2023
- How Strangers Got My Email Address From ChatGPT’s Model, by Jeremy White in The New York Times, Dec. 22, 2023
- The ChatGPT bug exposed more private data than previously thought, OpenAI confirms, Mashable.com
- How to Advocate for Data Privacy and Users' Rights, Wired, September 27, 2022


