What client data can go in a prompt (almost nothing)
Lesson 2 of 7 · Compliance & safe AI use
1 · Learn the move · Constraints + negative instructions
The paste is the disclosure. A return, a trial balance, a notice with the client's name on it - once it is in a consumer tool, you have disclosed return information, and section 7216 does not ask whether the tool kept it. The practice that holds up is the inverted scanner: what you paste, not what it wrote. De-identify first (Taxpayer A, rounded figures, the fact pattern without the person), then use, then verify every citation by hand. Whether a de-identified question falls outside section 7216 is unresolved, and removing names is a risk reduction, not a safe harbor.
Before I paste anything: here is what I plan to put in. Flag every element that is return information or could identify the client, and tell me what to replace it with. [describe the paste]
2 · Your turn. You write the prompt
A client's notice arrived as a PDF. You want the model to explain what the Service is proposing. The PDF carries the client's name, address, Social Security number and the proposed figure. Decide what, if anything, goes in - and write the prompt that enforces it.
Write the prompt for this scenario as given, or swap in a real one from your own work. The score works the same either way.
Remember: the AI sees only your prompt, not this page. If the situation isn't in your prompt, it doesn't exist.
Optional. These shape the output when you run your prompt below, not your score.