# What not to paste

A short rule for staff who use ChatGPT, Copilot, Gemini, or similar tools at work.

This is not legal advice. It is not a certificate. Logging a briefing in the literacy measures log (Art. 4) records a measure. It does not prove a level of literacy.

## Do not paste

- Customer email that includes people’s names
- Contracts
- National ID numbers
- Health data
- CVs or other applicant files

## Do not send unchecked output

Do not send AI output to a customer, applicant, or other outside person until someone on your team has read it and checked it.

## What to do instead

Write this rule down, tell all staff once, and log that briefing. Review the rule in six months.