Generative AI and company data: the essentials
ChatGPT, Copilot, GDPR, AI policies, shadow AI, data leaks: in-depth guides, sourced from vendors, France’s data protection authority (CNIL) and official texts, to help you decide with full knowledge of the facts.
ChatGPT and personal data: what happens to your information
What you type into ChatGPT is transmitted, kept for a while and, depending on the plan, may be used to improve the models. Here is what OpenAI says, plan by plan, and what remains the organisation’s responsibility.
Is ChatGPT GDPR compliant for businesses?
GDPR compliance is not a feature of a piece of software: it is the organisation, as controller, that has to demonstrate it. This guide covers the legal texts, the guidance of France’s data protection authority (CNIL) and what OpenAI provides for its business plans.
Copilot and privacy: is your company data protected?
With a work account, Microsoft applies its “enterprise data protection” to Copilot. What it covers, what changes with a personal account, and why access rights to your files matter as much as the tool itself.
AI policy for your organisation: template and essential rules
An AI use policy sets out what is allowed, what is not and who decides. Here are the rules that matter, the procedure that makes the policy genuinely enforceable, and a complete template to copy and adapt.
Should you ban ChatGPT in your organisation?
Ban it, let it happen or govern it: the three options have very different consequences. What shadow AI is, what labour law allows (with France as an example), and why most public guidance points towards governance.
ChatGPT data leaks: the known cases and how to protect yourself
Public incidents involving ChatGPT are few but instructive: most stem from how the tool was used, not from an attack. A look back at the documented cases, with sources, and at the measures that follow from them.
Every claim links to its source (official vendor pages, the French CNIL, EUR-Lex, Légifrance). ChatGPT is a trademark of OpenAI, Copilot of Microsoft, Claude of Anthropic, Gemini of Google. Tacite-IA is not affiliated with any of these vendors. This article is for information only and does not constitute legal advice.