Public or synthetic material is the safest place to design a workflow. Internal information needs an approved account and a defined purpose. Personal, client, privileged, or restricted information requires a stop and an organizational decision before any AI use.
Check the data boundaryThree information boundaries
Drafting a feedback outline from an invented scenario is different from uploading an employee record. Summarizing a public report is different from uploading a client file.
Published sources, invented examples, or material designed for training
Use it to design the prompt, review checklist, and expected output before real workplace information is involved.
Boundary: Verify facts and copyright status before sharing the result.
Non-public process information without client, employee, credential, security, or restricted commercial details
Proceed only in an employer-approved account and for an authorized work purpose.
Boundary: Remove identifiers, secrets, sensitive strategy, and details the task does not require.
Employee records, resumes, health or accommodation details, financial records, client files, credentials, source code, logs, or privileged material
Stop before using a public tool. Confirm the approved environment and required privacy, security, legal, contractual, and professional review.
Boundary: A useful output does not make an unauthorized input acceptable.
A job title, small team, date, location, unusual incident, or client detail can make a record identifiable. Replace real facts with synthetic equivalents when the workflow can be tested without them.
Too much information
Rewrite this performance feedback for the only senior designer in our Vancouver office after the March client complaint. [Full notes attached]
Synthetic workflow test
Create a feedback outline from this invented scenario. Separate observed behaviour, impact, expected standard, questions, and next step. Do not make an employment decision.
Before a workplace test
The Government of Canada guidance cited here applies directly to federal institutions and public servants. It is a useful public benchmark, not a statement that every Canadian workplace has the same policy or legal obligations.
Questions people search
Do not paste confidential, personal, privileged, classified, or commercially restricted information into a public consumer AI tool. Use only an employer-approved environment and confirm the authorized purpose, access, retention, contract, and applicable professional requirements.
Not always. A role, location, date, unusual event, client detail, or combination of facts may still identify a person or organization. Reduce the information to what the task actually requires and use synthetic material when possible.
Check the organization's approved tools, recording and consent rules, information classification, access controls, and retention requirements. A person must still verify decisions, owners, dates, and omissions before the notes are shared.
No. It is a planning screen for deciding what information a work test should use. Privacy obligations depend on the organization, province, sector, contract, purpose, and technology involved.
Sign in to get coaching and save your progress.
By continuing, you agree to our
Terms of Service and Privacy Policy