...
Clear Purpose and Legitimacy: Before collecting sensitive data, ensure there is a clear and legitimate need for each piece of sensitive information requested.
User Transparency: Always provide users with a clear and comprehensible explanation of what data is collected, why it is collected, how it will be used, and who it will be shared with. This explanation should be included directly within the format being used to collect data, such as a Questionnaire.
Minimization and Limitation: Collect only the sensitive data that is absolutely necessary for the purposes defined. Avoid collecting unnecessary sensitive information as this increases risk and potential liability.
Zero Tolerance Labeling of Sensitive Data fields: LEAD has an AI Questionnaire Assistant, which has access to Questionnaire Responses. Because of this, it is absolutely required to label any field requesting sensitive data correctly. If you do not check this box, sensitive data may be sent to OpenAI’s API, which is without qualification, unacceptable.
...
How LEAD Protects Users' Sensitive Information
...