6 work scenarios. Nothing is graded: pick an answer to see why it holds up or not.
Your answers are kept on this device only.
Scenario 1 of 6
A colleague wants to paste an error message into a public AI service. It contains an internal server address and the database password. They ask what they should do.
Scenario 2 of 6
This morning you realise the warehouse system's access token was pasted into an AI chat yesterday. You have already deleted the conversation. What is the right step?
Scenario 3 of 6
For a report, you replaced the names of 25 employees with codes K-01 to K-25. The code table is in the HR folder, and the job title column remains, including "the only in-house lawyer". Your manager asks whether the data is now anonymous.
Scenario 4 of 6
Your office starts using a new AI service. A colleague says, "Relax, I asked the AI and it said our chats are not used for training." What is the best response?
Scenario 5 of 6
The recruitment team wants to use an AI service that processes data abroad to summarise CVs. A manager says, "Applicants sent their CVs voluntarily, so nothing more is needed." Under Article 56 of the PDP Law, what must the organisation ensure?
Scenario 6 of 6
A staff member reports that two hours ago they accidentally uploaded a list of employees' diagnoses to their personal AI account. You receive the report. Which fits the PDP Law best?
