How to stop sensitive data leaking into ChatGPT, Copilot and other GenAI tools

To stop employees pasting company data into ChatGPT, Copilot and other GenAI tools, set a clear acceptable use policy, classify your sensitive data, then enforce it with endpoint controls that inspect prompts before content leaves the machine. Technical controls enforce a decision, so the.

A clear acceptable use policy is that decision, written down. Second, the data types prohibited in prompts and uploads, named explicitly rather than left to interpretation.

What Happened

Third, the upload restrictions that apply, including file types and content that may never leave the organization. Policy precedes technical controls because controls without a policy produce arbitrary blocks employees do not understand and route around.

• Effective prevention pairs network blocking with endpoint inspection that reads the prompt before it leaves the endpoint.

• They also miss personal accounts on unmanaged machines.

• Network controls block or allow domains but cannot read the content of an encrypted prompt, so they cannot tell a harmless question from a paste of client records.

Key Details

Without a written policy, there is no agreed standard to enforce, no basis for consequences and no way to tell an employee why an action was stopped. The policy turns a vague concern into an enforceable rule.

• Employees usually paste these to summarize, reformat or debug them, treating a routine shortcut as harmless while exposing data with real regulatory and competitive consequences.

• The highest-risk categories are personally identifiable information, protected health information, payment card data covered by PCI-DSS, and confidential business content such as contracts, financials and source code.

• Acronis GenAI Protection runs on Windows 10, Windows 11 and macOS, delivered through the Acronis platform alongside existing endpoint protection.

Why It Matters

You cannot stop the leakage of data you have not defined. Classification is the prerequisite that makes every later control precise instead of guesswork, and it gives you a basis for reporting on where sensitive data risk concentrates, not just for blocking.

• Acronis GenAI Protection also helps detect and block harmful prompts based on policy.

• Harmful prompts, including prompt injection attempts, can manipulate AI behavior or introduce unsafe instructions into workflows.

What Reports Say

Coverage of the story so far points to:

• Continued reporting by Acronis as more details emerge