KI und Datenschutz

Identify what enters the system and what can be inferred from it. Prompts, documents, images, voice recordings, tool results, and usage logs can all contain personal information. Record which providers and internal services process each category. Collect only what the task needs and set a retention policy. Separate temporary context from saved memory, analytics, debugging logs, and training use. Users should be able to understand the relevant settings without relying on an assistant’s unsupported statement about its own behavior. Apply access controls to original and derived data. Search indexes, embeddings, cached responses, and exported reports can reveal information even after the original upload is removed. Test deletion and account isolation through the actual application. Assess technical privacy claims carefully. De-identification and synthetic data can have limitations, while formal methods such as differential privacy depend on their mechanism and parameters. Review the intended use, threat model, and applicable requirements with appropriate expertise when handling consequential data.