Safe and Responsible AI Usage in Daily Work

The Legal Mandate for AI Literacy

EU AI Act: Article 4

Since February 2025, AI literacy is a legal requirement for all employees. Organizations must ensure staff can use AI safely and responsibly to protect data and uphold ethical standards.

Welcome. Under the EU AI Act, specifically Article 4, AI literacy is no longer just a professional skill—it is a legal requirement. Since February 2025, organizations have been mandated to ensure all staff can use AI tools safely. This lesson provides the framework to integrate AI into your daily work while remaining fully compliant with European law.

The Golden Rule: Data Privacy

Protecting Proprietary Data

Treat public AI tools like a public forum. Once data is entered, it can be used to train future models and cannot be deleted.

The most critical rule for daily AI usage is simple: Never paste sensitive, personal, or proprietary data into public AI tools. Treat tools like the free versions of ChatGPT or Gemini as a public forum. This includes client names, unannounced financials, internal strategies, and passwords. Correct. Items like passwords or internal strategy documents must stay behind our firewall and never be shared with public models.

Evaluating AI Use Cases

Is it Safe to Use AI?

Assess the risk of your task. Drag each workplace task to the Appropriate or Inappropriate column based on the EU AI Act guidelines.

Not every task is suitable for AI. Let's practice distinguishing between low-risk and high-risk usage. Drag the tasks on the left into the correct column. Wait, think about the risk. Does this task involve sensitive data or legal finality? If so, it belongs in the inappropriate column for public AI tools. Exactly. Tasks like drafting email outlines are low risk, while processing medical records or finalizing legal contracts carries significant compliance risk.

Human-in-the-Loop Workflow

Scenario: Drafting a Report

You are using an AI assistant in your email client. You must exercise Human Oversight to ensure the final output is accurate and compliant.

Imagine you're drafting a monthly report. The AI has generated this draft based on your notes. Look closely—it's made a few mistakes. Use the editor to fix the errors before sending.

Your Compliance Checklist

The Final Review

Before publishing AI-generated content, you must Verify, Check, and Declare.

Accountability remains with you, not the AI. Always follow these three steps: First, Verify Facts. AI can hallucinate false info. Second, Check for Bias. Ensure the tone is inclusive. Third, Declare Usage if required by company policy.

Common Pitfalls to Avoid

Compliance Red Flags

Avoid Shadow AI and Blind Trust. Ensure your tools are company-approved and your oversight is rigorous.

Finally, beware of common pitfalls. Shadow AI occurs when you use unauthorized tools on personal devices for work. Never fall into 'Blind Trust'—just because a report looks professional doesn't mean it's accurate. And always be cautious of copyright risks in AI-generated images or code.