Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Rule “chatgpt-security-risks/rule” #9451

Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 7 additions & 10 deletions rules/chatgpt-security-risks/rule.md
Original file line number Diff line number Diff line change
@@ -1,22 +1,23 @@
---
seoDescription: ChatGPT security risks include data breaches and unauthorized access to confidential information, while best practices involve not sharing sensitive info and monitoring data retention policies.
type: rule
title: Do you know the potential security risks of using ChatGPT?
seoDescription: ChatGPT security risks include data breaches and unauthorized
access to confidential information, while best practices involve not sharing
sensitive info and monitoring data retention policies.
uri: chatgpt-security-risks
authors:
- title: Ulysses Maclaren
url: https://www.ssw.com.au/people/ulysses-maclaren
created: 2023-05-16T14:47:50.644Z
guid: 9eddfea2-3870-4814-8097-ddbf68afaa36
---

ChatGPT is an AI language model developed by OpenAI that is considered generally safe due to the implementation of various security measures, data handling practices, and privacy policies. However, users should be aware of potential risks and follow best practices when using the platform.

::: good
![Figure: Good Example - You want to use your tools safely!](safe-dev.jpg)
:::

Open AI is a third-party platform and you should not make assumptions about how they process or retain data. They will also likely be able to change their policies from time to time so even if something is stated today it might be different tomorrow.
OpenAI is a third-party platform and you should not make assumptions about how they process or retain data. They will also likely be able to change their policies from time to time so even if something is stated today it might be different tomorrow.

You should never submit any confidential information into ChatGPT. Specifically, you should never submit any information which identifies or could potentially be used to identify an individual (E.g. name, address, date of birth, phone number etc.)

Expand All @@ -31,19 +32,17 @@ Key points:
* External security audits
* Bug bounty program
* Incident response plans

* Responsible data handling practices by OpenAI:

* Transparency about data collection purposes
* Data storage and retention policies (30 days)
* Controlled data sharing with third parties
* Compliance with regional data protection regulations
* Respecting user rights and control over their data

* ChatGPT is not confidential:

* All conversations are used as training data by default, but this can be turnedd off in the paid versions
* Users should avoid sharing sensitive information in the free version
* All conversations are used as training data by default, but this can be turned off
* Users should avoid sharing sensitive information

![Figure: Toggle Your Name | Settings | Data controls | Improve the model for everyone to stop the model training on your data](trainingondata.png)

Expand All @@ -52,14 +51,12 @@ Key points:
* Data breaches
* Unauthorized access to confidential information
* Biased or inaccurate information generation

* Best practices for using ChatGPT:

* Do not share or submit sensitive or confidential information on Chat GPT, ever
* Do not share or submit sensitive or confidential information on ChatGPT, ever
* Review privacy policies of platforms using ChatGPT
* Use anonymous or pseudonymous accounts
* Monitor data retention policies

* Current regulations:

* No specific regulations for AI systems like ChatGPT
Expand Down
Loading