A user pastes their Social Security Number into a Claude chat when asking for tax help. What should a RESPONSIBLE application developer configure?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Responsible developers intercept sensitive data before it hits the API — redact SSNs, credit cards, and other PII from both API calls and logs. Don't outsource your privacy obligations to Anthropic.
Full explanation below image
Full Explanation
Responsible application development requires handling PII appropriately: implement PII detection to redact or tokenize sensitive data before sending to the API, avoid logging raw conversations that may contain sensitive information, implement appropriate retention and deletion policies, and comply with relevant regulations (GDPR, CCPA, HIPAA where applicable). Option A (logging SSN) violates basic data privacy principles. Option C is wrong — Claude has no persistent memory by default and shouldn't be asked to store PII. Option D is wrong — while Anthropic has data handling practices, the operator is still responsible for their application's data handling.