AI incident response

What to do after staff paste into AI

Use the structured checklist after a suspected paste incident. This check is operational guidance only and does not provide legal or privacy advice.

Incident type Pasted to Exposure timing

Output behaviour Output was saved Output was shared Output was reused

Practice name for follow-up Work email for follow-up

Do not submit patient names, prompts, screenshots, notes, or treatment content. If you think patient-identifiable data was included, escalate as high priority and ask the team to pause use of that output.