A social-services worker almost pastes resident SSN and medical notes into a Copilot prompt for rewrite help. What should the worker recognize?
Select an answer to reveal the explanation.
Short Explanation
SSNs and medical notes don’t belong in a casual “please rewrite this” prompt. That’s sensitive-data risk with a friendly UI. Strip identifiers or use approved redacted templates first.
Full Explanation
A social-services worker who almost pastes resident SSN and medical notes into a Copilot prompt should recognize that sensitive personal and health data in prompts creates exposure risk and should be avoided or minimized. Prompt content can be retained in logs, visible to administrators under policy, or otherwise broaden access beyond need-to-know. Municipal social-services practice requires minimizing PII and PHI in generative prompts.
SSNs improve Copilot rewriting quality so including them is recommended is false and dangerous; identifiers are not a quality booster and increase exposure.
Medical notes are safe in any Copilot chat because AB-730 requires automatic public posting invents both safety and a nonsensical exam posting requirement.
Prompt injection only applies to SSNs so medical notes can be pasted freely misuses the injection concept and incorrectly green-lights PHI in prompts.
Exam caveat: stems about SSN/PHI in prompts test sensitive-data minimization/exposure risk—not injection-only or “paste freely” myths.
Operational check: rewrite case notes with Copilot using de-identified summaries only; keep SSN and medical detail in the protected case system, follow city privacy policy, and escalate to the privacy officer when unsure.