You want help rewriting a routine customer email, but the copied thread includes account numbers, an address and an unrelated personal explanation. The writing task may need the issue and desired tone, not the customer’s identity.
Before pasting anything, check whether the tool and use are approved by your organisation. Removing a name does not automatically make a document anonymous or suitable for an external service.
Keep only what the task needs
Replace unnecessary names and identifiers with consistent neutral labels, and remove irrelevant passages. Preserve the facts the writing task actually depends on. For a fictional example, “Customer A received the wrong size” may be enough to draft an acknowledgement without including the full order history.
The ICO’s AI and data-protection guidance discusses responsible handling of personal information in AI systems. Its legal framework is UK-specific; your organisation must apply the requirements relevant to its own processing.
Check the document, not only the page image
A black rectangle drawn over text may leave the text underneath recoverable. Use an approved redaction method for the format, then inspect the resulting file and its metadata as required by your organisation. Comments, tracked changes, hidden sheets and attachments can carry information that is not obvious in the visible page.
Do not upload a sensitive original to a different unapproved service just to remove details for the first service. That would move the disclosure earlier rather than solve it.
Review what comes back
Check that the generated draft has not invented facts, promises or personal details. Restore necessary identifiers only within the approved workflow and verify that each refers to the correct person or case.
Keep a human responsible for the final message. A polished paragraph can still send the wrong commitment or disclose information to the wrong recipient.
The useful preparation question is: “What is the smallest accurate version of this material that the task needs?” If you cannot remove sensitive content without destroying the task, use an authorised environment or handle the work without that AI tool.