--- title: "AI, Privacy & Compliance: A Small Business Survival Guide" description: "Practical redaction rules, a one-page AI policy, and vendor contract clauses that keep customer data out of public chatbots and audit reports clean." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": [ "LocalBusiness", "ProfessionalService" ], "@id": "https://technologyoncall.com/#business", "name": "Technology On Call", "alternateName": "The Tech Doctor", "url": "https://technologyoncall.com/", "logo": "https://technologyoncall.com/favicon.png", "image": "https://technologyoncall.com/og.png", "description": "Technology consultant for small business — we make technology, marketing, and AI work for small businesses in Connecticut so you can stop fighting your tools and get back to running your business.", "telephone": "+1-860-408-9066", "email": "help@technologyoncall.com", "priceRange": "$$", "currenciesAccepted": "USD", "paymentAccepted": "Cash, Credit Card, Check, ACH", "address": { "@type": "PostalAddress", "addressLocality": "Granby", "addressRegion": "CT", "postalCode": "06035", "addressCountry": "US" }, "geo": { "@type": "GeoCoordinates", "latitude": 41.9528, "longitude": -72.7895 }, "hasMap": "https://www.google.com/maps/place/Granby,+CT+06035", "openingHoursSpecification": [ { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ], "opens": "08:00", "closes": "18:00" } ], "contactPoint": [ { "@type": "ContactPoint", "telephone": "+1-860-408-9066", "email": "help@technologyoncall.com", "contactType": "customer service", "areaServed": "US", "availableLanguage": [ "English" ] } ], "founder": { "@type": "Person", "name": "Paul Berg", "jobTitle": "Owner & Tech Doctor" }, "areaServed": [ { "@type": "State", "name": "Connecticut" } ], "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall", "https://www.youtube.com/channel/UC4HAzLK0M7zTYw9sd2yoKPA" ] }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://technologyoncall.com/#organization", "name": "Technology On Call", "alternateName": "The Tech Doctor", "url": "https://technologyoncall.com/", "logo": "https://technologyoncall.com/favicon.png", "email": "help@technologyoncall.com", "telephone": "+1-860-408-9066", "founder": { "@type": "Person", "name": "Paul Berg" }, "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall", "https://www.youtube.com/channel/UC4HAzLK0M7zTYw9sd2yoKPA" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://technologyoncall.com/#website", "url": "https://technologyoncall.com/", "name": "Technology On Call", "publisher": { "@id": "https://technologyoncall.com/#organization" }, "inLanguage": "en-US" }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://technologyoncall.com/#organization", "name": "Technology On Call", "alternateName": "The Tech Doctor", "url": "https://technologyoncall.com", "logo": { "@type": "ImageObject", "url": "https://technologyoncall.com/favicon.png", "width": 512, "height": 512 }, "image": "https://technologyoncall.com/og.png", "email": "help@technologyoncall.com", "telephone": "+1-860-408-9066", "founder": { "@type": "Person", "name": "Paul Berg" }, "foundingLocation": { "@type": "Place", "address": { "@type": "PostalAddress", "addressLocality": "Granby", "addressRegion": "CT", "addressCountry": "US" } }, "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall" ] }, { "@context": "https://schema.org", "@type": "ProfessionalService", "@id": "https://technologyoncall.com/#business", "name": "Technology On Call", "alternateName": "The Tech Doctor", "description": "Small business technology support, website design, marketing, SEO, and AI solutions in Granby, CT and surrounding areas.", "url": "https://technologyoncall.com", "logo": "https://technologyoncall.com/favicon.png", "image": "https://technologyoncall.com/og.png", "telephone": "+1-860-408-9066", "email": "help@technologyoncall.com", "address": { "@type": "PostalAddress", "streetAddress": "3 Murthas Way, Apt 317", "addressLocality": "Granby", "addressRegion": "CT", "postalCode": "06035", "addressCountry": "US" }, "contactPoint": { "@type": "ContactPoint", "telephone": "+1-860-408-9066", "email": "help@technologyoncall.com", "contactType": "customer service", "areaServed": "US", "availableLanguage": [ "English" ] }, "areaServed": { "@type": "GeoCircle", "geoMidpoint": { "@type": "GeoCoordinates", "latitude": 41.9548, "longitude": -72.7901 }, "geoRadius": "50000" }, "founder": { "@type": "Person", "name": "Paul Berg", "jobTitle": "Owner & Tech Doctor" }, "priceRange": "$$", "openingHours": "Mo-Fr 08:00-18:00", "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall" ], "makesOffer": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Small Business IT Support" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Website Design" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Website Development" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "SEO" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Marketing Strategy" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Computer Networking" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Solutions" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Database Development" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Drone Video Production" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Virtual Tours" } } ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://technologyoncall.com/#website", "name": "Technology On Call", "url": "https://technologyoncall.com", "publisher": { "@id": "https://technologyoncall.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": "https://technologyoncall.com/?q={search_term_string}", "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "FAQPage", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", "h2", "[data-speakable]" ] }, "mainEntity": [ { "@type": "Question", "name": "How can I tell if an AI tool is using what I type to train its models?", "acceptedAnswer": { "@type": "Answer", "text": "The quickest, most reliable place to look is the vendor's legal pages: Terms of Service, Privacy Policy, and any Data Processing Addendum. Those documents will say whether the vendor stores, analyzes, or uses your content to improve models. Look for clear language such as “we do not use customer content to train models,” and treat vague phrases like “may use” or “we may analyze” as a red flag for anything sensitive. Practical checklist to speed the review: - Open the vendor site and find headings labeled Privacy, Data Processing, or Customer Content. - Use your browser's Find (Ctrl/Cmd+F) for " } }, { "@type": "Question", "name": "Is it ever okay to paste sensitive data into an AI chat?", "acceptedAnswer": { "@type": "Answer", "text": "Short answer: not into a consumer chat. Don't paste protected health information (PHI), unredacted personally identifiable information (PII), bank account numbers, tax records, or contract text covered by an NDA into a free public chat window. Practical alternatives that still let you use AI: - Redact first. Replace identifiers with consistent placeholders: [CLIENTNAME], [ACCOUNT], [SSNLAST4], or [SERVICEDATE:YYYY-MM-DD]. Keep a local mapping if you need to reinsert real values later, but never store that mapping in the chat tool. - Use a contracted business tier or a private/on-premises optio" } }, { "@type": "Question", "name": "What should a one-page internal AI policy actually say so people will follow it?", "acceptedAnswer": { "@type": "Answer", "text": "Keep it short, specific, and enforceable. A one-page policy is easier to read, easier to follow, and easier to update than a long manual. Put responsibility on one named person or role and list practical do/don't items. Put these five items at the top of the page: - Approved tools and forbidden tools (list product names and versions where practical). - Allowed data types (public info, redacted records) and off-limits data (PHI, unredacted PII, NDA-covered contract text, payroll). - Who reviews and signs any customer-facing AI output (name or role). - How to report an incident (email, phone, ex" } }, { "@type": "Question", "name": "How do I make sure AI-written documents I send to customers are accurate and defensible?", "acceptedAnswer": { "@type": "Answer", "text": "Treat AI as a drafting assistant, not a final authority. Build a short, repeatable review workflow the whole team uses. A practical three-step workflow: - Draft: generate the initial text with AI. - Verify: a staff member checks facts, figures, dates, and contract terms against source documents. - Sign-off: the business owner or designated reviewer approves the final copy before sending. Save versioned records so you can show who checked what and when. Use clear filenames like ProposalClientXYZv1AI.txt, ReviewedByJane2026-03-10.docx, FinalProposalClientXYZ2026-03-11.pdf and store them in your " } }, { "@type": "Question", "name": "What contract promises should I insist on before a vendor sees my client data?", "acceptedAnswer": { "@type": "Answer", "text": "Before you grant an app or integration access to customer data, get these three promises in writing: - A data processing clause that limits how the vendor stores and uses your inputs and requires encryption in transit and at rest. - An explicit statement about whether customer content will be used to train models; if you must send PII or contract text, push for language such as “we do not use customer content to train models.” - A contractual obligation to notify you promptly of any data incident, with a clear escalation path and remediation responsibilities. If a vendor sticks to “may use” la" } }, { "@type": "Question", "name": "How do I keep up with changing rules without turning into a lawyer?", "acceptedAnswer": { "@type": "Answer", "text": "You don't need to chase every headline. Build a small, reliable monitoring habit that flags only what affects your processes. Concrete steps to start this week: - Subscribe to one reliable source and skim headlines weekly. The National Cybersecurity Alliance maintains plain-language guides you can forward to staff. - Assign one person to summarize relevant changes quarterly and recommend policy updates. - When a change looks like it will affect you, schedule a short policy review: update the one-page policy and retrain staff with a two-item checklist. If a contract change or vendor wording loo" } } ] }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://technologyoncall.com/blog/ai-privacy-compliance-small-business#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://technologyoncall.com/" }, { "@type": "ListItem", "position": 2, "name": "Blog", "item": "https://technologyoncall.com/blog" }, { "@type": "ListItem", "position": 3, "name": "AI, Privacy & Compliance: What Small Businesses Need to Know", "item": "https://technologyoncall.com/blog/ai-privacy-compliance-small-business" } ] }, { "@context": "https://schema.org", "@type": "Article", "@id": "https://technologyoncall.com/blog/ai-privacy-compliance-small-business#article", "headline": "AI, Privacy & Compliance: What Small Businesses Need to Know", "description": "Practical redaction rules, a one-page AI policy, and vendor contract clauses that keep customer data out of public chatbots and audit reports clean.", "image": "https://erucrvnsrebzwinakaxk.supabase.co/storage/v1/object/public/blog-images/ai-privacy-compliance-small-business.jpg", "datePublished": "2026-05-04T00:00:00+00:00", "dateModified": "2026-05-04T00:00:00+00:00", "author": { "@type": "Person", "@id": "https://technologyoncall.com/about#paul-berg", "name": "Paul Berg", "jobTitle": "Owner & Tech Doctor", "url": "https://technologyoncall.com/about", "worksFor": { "@id": "https://technologyoncall.com/#business" }, "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall" ], "knowsAbout": [ "Small Business IT Support", "Website Design", "SEO", "AI Solutions", "Marketing Strategy", "Computer Networking" ] }, "publisher": { "@id": "https://technologyoncall.com/#organization" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://technologyoncall.com/blog/ai-privacy-compliance-small-business" }, "articleSection": "AI & Automation", "keywords": "ai, privacy, compliance", "wordCount": 1401, "inLanguage": "en-US" } ] --- ![Revisit consent button](https://cdn-cookieyes.com/assets/images/revisit.svg) We value your privacy We use cookies to enhance your browsing experience, serve personalised ads or content, and analyse our traffic. By clicking "Accept All", you consent to our use of cookies. Customise Reject All Accept All Powered by[](https://www.cookieyes.com/product/cookie-consent/?ref=cypbcyb&utm_source=cookie-banner&utm_medium=fl-branding) Customise Consent Preferences ![](https://cdn-cookieyes.com/assets/images/close.svg) We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below. The cookies that are categorised as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... Show more NecessaryAlways Active Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data. - Cookie \_\_cf\_bm - Duration 1 hour - Description This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. - Cookie VISITOR\_PRIVACY\_METADATA - Duration 6 months - Description YouTube sets this cookie to store the user's cookie consent state for the current domain. - Cookie cookieyes-\* - Duration 1 year - Description CookieYes sets this cookie for consent solution management. Functional Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features. - Cookie VISITOR\_INFO1\_LIVE - Duration 6 months - Description A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. - Cookie ytidb::LAST\_RESULT\_ENTRY\_KEY - Duration Never Expires - Description The cookie ytidb::LAST\_RESULT\_ENTRY\_KEY is used by YouTube to store the last search result entry that was clicked by the user. This information is used to improve the user experience by providing more relevant search results in the future. Analytics Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc. - Cookie \_ga\_\* - Duration 1 year 1 month 4 days - Description Google Analytics sets this cookie to store and count page views. - Cookie \_ga - Duration 1 year 1 month 4 days - Description Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. - Cookie session-id - Duration 1 hour - Description Amazon Pay uses this cookie to maintain a "session" that spans multiple days and beyond reboots. The session information includes the identity of the user, recently visited links and the duration of inactivity. - Cookie YSC - Duration session - Description YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages. Performance Performance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors. No cookies to display. Advertisement Advertisement cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns. - Cookie \_\_Secure-YNID - Duration 6 months - Description YouTube cookie used to protect user security and prevent fraud, especially during the login process. - Cookie \_\_Secure-ROLLOUT\_TOKEN - Duration 6 months - Description YouTube sets this cookie to manage feature rollout and experimentation. It helps Google control which new features or interface changes are shown to users as part of testing and staged rollouts, ensuring consistent experience for a given user during an experiment. - Cookie \_\_Secure-YEC - Duration past - Description Description is currently not available. Uncategorised Other uncategorised cookies are those that are being analysed and have not been classified into a category as yet. - Cookie \_\_dpl - Duration 7 days - Description Stores consent preferences and privacy choices, remembers selections across visits, enabling compliant cookie behavior, streamlined functionality, and improved user experience. Reject All Save My Preferences Accept All Powered by[](https://www.cookieyes.com/product/cookie-consent/?ref=cypbcyb&utm_source=cookie-banner&utm_medium=sl-branding) [Skip to main content](#main-content) [![Technology On Call — "Online Or At Your Door"](/assets/toc-logo-og-D75giZ5W.png)](/) [Home](/)[About](/about)[Services](/services)[Web & Media](/web-media)[Blog](/blog)[Contact](/contact) [860-408-9066](tel:860-408-9066)[](tel:860-408-9066) [Join a Meeting](https://toc.screenconnect.com) Search… ⌘K 1. [Home](/) 2. [Blog](/blog) 3. AI, Privacy & Compliance: What Small Businesses Need to Know [All articles](/blog) AI & Automation May 4, 2026 · 6 min read # AI, Privacy & Compliance: What Small Businesses Need to Know AI tools save time but can put customer data at risk if you paste PHI, PII, or contracts into consumer chats. Learn practical redaction, policy, and contract steps. Listen to this article · ~9 min listen Sarah 1× AI-narrated by Sarah · 3 parts, played seamlessly. Tap play to start. ![AI, Privacy & Compliance: What Small Businesses Need to Know](https://erucrvnsrebzwinakaxk.supabase.co/storage/v1/object/public/blog-images/ai-privacy-compliance-small-business.jpg) In this article 1. 1. [How can I tell if an AI tool is using what I type to train its models?](#how-can-i-tell-if-an-ai-tool-is-using-what-i-type-to-train-its-models) 2. 2. [Is it ever okay to paste sensitive data into an AI chat?](#is-it-ever-okay-to-paste-sensitive-data-into-an-ai-chat) 3. 3. [What should a one-page internal AI policy actually say so people will follow it?](#what-should-a-one-page-internal-ai-policy-actually-say-so-people-will-follow-it) 4. 4. [How do I make sure AI-written documents I send to customers are accurate and defensible?](#how-do-i-make-sure-ai-written-documents-i-send-to-customers-are-accurate-and-def) 5. 5. [What contract promises should I insist on before a vendor sees my client data?](#what-contract-promises-should-i-insist-on-before-a-vendor-sees-my-client-data) 6. 6. [How do I keep up with changing rules without turning into a lawyer?](#how-do-i-keep-up-with-changing-rules-without-turning-into-a-lawyer) 7. 7. [Frequently Asked Questions](#frequently-asked-questions) If you've ever copied a contract paragraph, a patient note, or a bank number into an AI chat and then felt a small chill wondering where that text went, you're not alone. These tools can save hours on routine work, but they also change the rules about who can see and reuse what you type. If you'd like hands-on help building safe, practical workflows that fit Connecticut businesses, start with my AI & Automation in Connecticut service. If you'd rather hand this off, that's exactly what we do at [AI & Automation in Connecticut](https://technologyoncall.com/services/ai-automation-ct). For broader safety habits worth building into your week, [the National Cybersecurity Alliance](https://staysafeonline.org) keeps a clean library of plain-language guides. ## How can I tell if an AI tool is using what I type to train its models? The quickest, most reliable place to look is the vendor's legal pages: Terms of Service, Privacy Policy, and any Data Processing Addendum. Those documents will say whether the vendor stores, analyzes, or uses your content to improve models. Look for clear language such as “we do not use customer content to train models,” and treat vague phrases like “may use” or “we may analyze” as a red flag for anything sensitive. Practical checklist to speed the review: - Open the vendor site and find headings labeled Privacy, Data Processing, or Customer Content. - Use your browser's Find (Ctrl/Cmd+F) for words like retain, train, improve, anonymize, or third parties. - Prefer business or enterprise tiers for contractual promises — free consumer tiers often include broad rights to use inputs. A pattern I see: consumer chat windows frequently allow companies to use inputs for research, while paid business tiers often add contractual promises not to use customer content. If you're feeding anything sensitive into a tool, that paid upgrade is usually worth the cost. For plain-language safety guides you can forward to staff, the National Cybersecurity Alliance's resources are a good place to start. ## Is it ever okay to paste sensitive data into an AI chat? Short answer: not into a consumer chat. Don't paste protected health information (PHI), unredacted personally identifiable information (PII), bank account numbers, tax records, or contract text covered by an NDA into a free public chat window. Practical alternatives that still let you use AI: - Redact first. Replace identifiers with consistent placeholders: \[CLIENT\_NAME\], \[ACCOUNT\_#\], \[SSN\_LAST4\], or \[SERVICE\_DATE:YYYY-MM-DD\]. Keep a local mapping if you need to reinsert real values later, but never store that mapping in the chat tool. - Use a contracted business tier or a private/on-premises option that explicitly states inputs won’t be used to train models and that encrypts content in transit and at rest. - For regulated classes of data (PHI, certain financial records), only use tools that advertise and contract for that data type; require breach notification and liability language in the agreement. A dental office I work with used a free chat to rewrite patient letters. We switched them to a paid, contract-backed tool and trained staff on one habit: no raw patient names, no IDs, ever. That single change removed the immediate exposure. ## What should a one-page internal AI policy actually say so people will follow it? Keep it short, specific, and enforceable. A one-page policy is easier to read, easier to follow, and easier to update than a long manual. Put responsibility on one named person or role and list practical do/don't items. Put these five items at the top of the page: - Approved tools and forbidden tools (list product names and versions where practical). - Allowed data types (public info, redacted records) and off-limits data (PHI, unredacted PII, NDA-covered contract text, payroll). - Who reviews and signs any customer-facing AI output (name or role). - How to report an incident (email, phone, expected response time) and who is responsible for the follow-up. - Review cadence and owner (for example: quarterly review owned by Office Manager). Keep the policy visible: a pinned file in your shared drive and a printed one-page checklist in staff areas work well. If you want a ready-made one that fits your workflows, I tailor and embed these for local businesses as part of my consultations. Related reading: [How AI Can Transform Your Small Business in 2026](https://technologyoncall.com/blog/transform-your-business-with-ai) covers a neighboring piece of the same problem. ## How do I make sure AI-written documents I send to customers are accurate and defensible? Treat AI as a drafting assistant, not a final authority. Build a short, repeatable review workflow the whole team uses. A practical three-step workflow: - Draft: generate the initial text with AI. - Verify: a staff member checks facts, figures, dates, and contract terms against source documents. - Sign-off: the business owner or designated reviewer approves the final copy before sending. Save versioned records so you can show who checked what and when. Use clear filenames like Proposal\_ClientXYZ\_v1\_AI.txt, Reviewed\_By\_Jane\_2026-03-10.docx, Final\_Proposal\_ClientXYZ\_2026-03-11.pdf and store them in your normal document system. Those files are the first thing an insurer or lawyer will ask for if a dispute arises. If you want quick, practical examples of safe AI tasks your team can try this week, read How AI Can Help Your Small Business Today (Not Someday). ## What contract promises should I insist on before a vendor sees my client data? Before you grant an app or integration access to customer data, get these three promises in writing: - A data processing clause that limits how the vendor stores and uses your inputs and requires encryption in transit and at rest. - An explicit statement about whether customer content will be used to train models; if you must send PII or contract text, push for language such as “we do not use customer content to train models.” - A contractual obligation to notify you promptly of any data incident, with a clear escalation path and remediation responsibilities. If a vendor sticks to “may use” language and you need to send contract text or customer records, push for a business/enterprise tier or consider a different vendor. Often a modest upgrade buys the protections you need without a big operational change. ## How do I keep up with changing rules without turning into a lawyer? You don't need to chase every headline. Build a small, reliable monitoring habit that flags only what affects your processes. Concrete steps to start this week: - Subscribe to one reliable source and skim headlines weekly. The National Cybersecurity Alliance maintains plain-language guides you can forward to staff. - Assign one person to summarize relevant changes quarterly and recommend policy updates. - When a change looks like it will affect you, schedule a short policy review: update the one-page policy and retrain staff with a two-item checklist. If a contract change or vendor wording looks risky and you'd rather not wrestle with legal text alone, book a call with me and I’ll walk through the contract language and the operational changes that matter. Stuck on a specific situation? [Ask Paul a quick question](https://technologyoncall.com/ask) or [book a call](https://technologyoncall.com/contact) and we'll point you in the right direction. ## Frequently Asked Questions **Do I need antivirus on a Mac?** Yes. Macs are targeted less often than some other platforms, but they aren't immune. A reputable antivirus or endpoint protection product helps stop common threats like malicious email attachments and drive-by downloads; keep macOS and apps up to date as well. **Can I use a free AI chat for marketing copy?** You can for non-sensitive marketing copy, but don't put customer PII, proprietary pricing, or internal financials into a free consumer chat. For anything that links back to customers or contracts, redact identifiers or use an approved business tool, and always proofread — AI can invent details. **What exactly counts as PII I shouldn't paste into AI?** PII includes information that identifies a person when combined: names with addresses, phone numbers, Social Security numbers, account numbers, or emails tied to private records. If a name links to a private record, don't paste it into an unapproved AI tool — the FTC's Protecting Personal Information guidance explains these business risks. **How quickly should I update my AI policy when a new law appears?** Don't panic. Assign an owner to vet the law and identify direct impacts. For most small businesses, a 14–30 day review window is reasonable: confirm whether the law affects your data handling, update the one-page policy, and retrain staff with a short checklist. #ai #privacy #compliance ## Need help with this in your business? Paul Berg, The Tech Doctor — friendly, low-pressure technology help across Connecticut. [Talk to Paul](/contact) ## Related articles [AI & Automation ### Stop Losing Leads in Your Inbox The most expensive marketing problem isn't getting leads — it's losing the ones you already have because they're buried in an inbox while you're on a job. Here's how to fix that. ](/blog/stop-losing-leads-in-your-inbox)[AI & Automation ### How AI Can Transform Your Small Business in 2026 Stop losing leads to voicemail or half-finished quotes. Pick one process, run a small AI pilot that plugs into your calendars and CRM, and measure the result. ](/blog/transform-your-business-with-ai)[AI & Automation ### 5 Ways Small Businesses Are Using AI to Save Time Right Now Five practical AI wins for small businesses—email triage, meeting notes, proposals, chatbots, and spreadsheet cleanups—with safe setup steps you can try this week. ](/blog/ai-time-saving-small-business-2026) ## Comments Be the first to comment. ### Leave a comment Comments are reviewed before they appear. Your email is never shown publicly. Name \* Email (optional, not shown) Comment \* 0/4000 Submit comment [ Have a question? Get a real answer — instantly. Ask anything about IT, websites, marketing, or AI. Powered by Tech Doctor knowledge. Ask NOW! ](/search) ![Technology On Call](/assets/toc-logo-og-D75giZ5W.png) Online Or At Your Door Paul Berg — Tech Doctor Technology, marketing, and AI solutions for home-based, small, and medium-sized businesses. [](https://www.facebook.com/paullberg)[](https://www.linkedin.com/in/technologyoncall/)[](https://www.youtube.com/@TechOnCall?sub_confirmation=1) [Subscribe on YouTube](https://www.youtube.com/@TechOnCall?sub_confirmation=1) Tech tips by email Subscribe Double opt-in — we'll send a confirmation link. No spam, unsubscribe anytime. ### Quick Links [Home](/)[About](/about)[Services](/services)[Web & Media](/web-media)[Blog](/blog)[Contact](/contact) [Join a Meeting](https://toc.screenconnect.com) ### Contact [ 860-408-9066](tel:860-408-9066)[ help@technologyoncall.com](mailto:help@technologyoncall.com) Granby, CT 06035 [Serving all of Connecticut](/service-area) © 2026 Technology On Call. All rights reserved. [Privacy Policy](/privacy)[Terms of Service](/terms)[Disclaimer](/disclaimer) [Website by Technology On Call](https://technologyoncall.com) [](/admin "Admin")