Check before client data goes into AI
check_ai_data_protectionRead-onlyIdempotent
Lists what a UK firm should check before client or staff information goes into an AI tool, under UK GDPR, ordered by what matters most for that tool and that data. Use when an owner asks if they can put client information into ChatGPT, whether ChatGPT or Copilot is GDPR compliant for their business, what to do about staff pasting customer details into AI, or what to ask an AI supplier. Returns questions to ask with the reason for each, not legal advice.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | Yes | What would go in. special_category = health, ethnicity, religion, sexual orientation and similar; criminal_records = criminal offence data such as background checks. | |
| tool | Yes | personal_account = a personal or free login to a general AI chat tool; business_plan = a business or team plan of one; built_into_software = AI features inside software the firm already uses; specialist_or_custom = a specialist AI supplier or a tool built for the firm. | |
| regulated | No | True if the firm is regulated by a professional or financial regulator. |