Security Tips when using Artificial Intelligence (AI) Tools

Security Tips for using AI Tools :

1. Use a trusted AI tool:
   
   • Always use trusted and legitimate AI platform or applications from reputable sources. Access or install the AI tools only through their official channel or app stores.
   • Review the Privacy Policy, Terms of Use and other relevant data handling policies to understand how your data would be collected, stored, used, shared and protected.
   • Review user comments before using or downloading the AI tools.
   • Use the AI tools with settings to opt-out the sharing of chat history to avoid the conversations, between you and the AI tool, being saved and used for AI model training.
2. Enable security features available in the AI tools:
   • Make sure that you are using a unique and strong password. Enable 2-factor authentication whenever possible.
   • Utilize available security features such as enable 2-factor authentication, access controls, encryption, etc. to enhance the protection when using AI platforms.
   • Disable chat history and data sharing functions to reduce the risk of data leakage.
3. Use secure network:
   • Avoid using public Wi-Fi or other unsecured networks when accessing the AI tools as it may expose your data to unauthorized access and increase the risk of malware infection or data interception.
   • Use a secure network or a VPN to protect your Internet connection and data transfer.
4. Keep your device and software up-to-date:
   • Always keep your operating system, antivirus software and all other applications, including the AI tools, on your device up-to-date with the latest security patches to prevent any vulnerabilities being exploited by threat actors.
5. Don’t share personal or sensitive information:
   • Avoid sharing any personal or confidential information, such as real name, passwords, photos, videos, biometric information, financial information, or any other personally identifiable information (PII), proprietary source code, etc. with the AI tools, public webpages or online platforms.  Avoid giving away too much information which can identify yourself or other individuals.
   • If it is necessary to give away some information, please anonymise or mask the data whenever possible before input.
6. Validate the outputs generate by AI tools:
   • Check the accuracy of the outputs generated by AI tools by verifying through multiple reliable sources.
   • Avoid using inaccurate, outdated, misleading, biased, offensive or discriminatory information.
   • Application developers should also double-check the AI-generated code, scripts or technical recommendations before using them, make sure no malicious code is inserted and avoid security breaches.
7. Beware of the intellectual property rights issues:
   • Do not upload or paste copyrighted materials, licensed content or restricted information into AI tools unless you are authorised to do so.
   • Also be cautious when reusing AI-generated content, as it may create copyright, ownership or compliance concerns.
8. Be transparent when AI-generated content is used:
   • Users should indicate when content has been generated or significantly edited by AI tools.
9. Do not rely on AI as the final decision-maker:
   • AI tools should be used as an assistant only. Users remain responsible for the content they submit, the outputs they use, and any decisions made based on AI-generated results.
10. Be cautious of phishing attempts:
    • Cyber criminals may attempt to make use of the AI tools to impersonate and steal personal information.  Always verify that you are interacting with the legitimate AI tools and avoid clicking on any suspicious links or downloading any suspicious files unless you are certain of their legitimacy.
11. Manage chat history and files uploaded carefully:
    • After using AI tools, clear your browser history, cache, and cookies to remove any traces of your records or conversation. Delete outdated conversations, uploaded files and unused AI accounts where appropriate to reduce the risk of data exposure.
12. Report Security Issues:
    • If you suspect mistakenly disclose, misuse or encounter suspicious activities with the AI tools, report it immediately to your departmental IT support (for Staff) or ITSC immediately.