Not all AI tools are created equal — especially when it comes to sensitive data.
AI tools are becoming everyday assistants in our work lives. From help with brainstorming to summarizing text, they can be a game-changer.
However, before jumping in, it’s essential to understand a key principle of cybersecurity at Yale: knowing your risk.
When you use AI tools, you may be sharing data. Unfortunately, not all tools handle that data safely or securely. That’s why Yale has a set of approved AI tools you can use confidently, based on the data classification of the information you work with.
So what does it mean to "know your risk"? Here’s how to break it down:
Step 1: Understand your data classification
Yale’s Data Classification Policy organizes data into three risk levels: high, moderate, and low. These levels reflect the sensitivity and potential impact if it’s exposed.
Here are a few examples of each category:
- High Risk: Personally identifiable patient data or human subject information
- Moderate Risk: Non-public, University-owned research data or student and applicant information
- Low Risk: Public information Yale shares on its website
Understanding your data’s classification helps you determine what protections are needed. Plus, it clarifies which AI tools are safe to use.
Step 2: Consider external obligations
Some data is subject to outside rules. Examples include HIPAA (health information), FERPA (student records), or research agreements. These external obligations may require stricter protections. They can also influence which tools are approved for use.
Step 3: Match your risk to the right AI tool
Once you know your data’s classification and any external obligations, head to Yale’s Access AI Tools & Resources page. It helps you choose the right tool based on your risk level — so you can work smarter and safer.
Here are a few ways to stay cyber smart with AI this summer:
- Pause before you paste. Don’t drop restricted or confidential data into AI tools that aren’t approved for that level of risk.
- Choose the right tool for the job. Using Yale-approved AI tools protects you, your work, and our community.
- When in doubt, ask. If you have questions about security and AI tools, contact the Information Security Office for guidance. Always better safe than sorry!
AI can be a powerful helper — but it needs the right guardrails.
By understanding your data’s risk level and sticking with approved tools, you’re helping protect Yale while using technology to your advantage.
Want to learn more?
Don’t miss our summer awareness campaign, Bee Cyber Smart with AI: It’s as Easy as A-B-C, running July 21 through August 1. Stay tuned for tips, tools, and interactive fun to help you build your AI savvy — one letter at a time.
Protecting Yale’s data starts with knowing your risk - check out these resources for more details: