Best Practices: Using Generative AI
What is Generative AI Use?
Generative AI systems can help create content, summarize information, answer questions, and support learning, research, and productivity. Newer AI tools may also connect to files, applications, calendars, email, and other services to help complete tasks on a user's behalf.
While these tools offer significant benefits, they can also introduce risks related to privacy, security, accuracy, and data protection. Understanding these risks can help you use AI safely and responsibly.
Common Risks
| Category | Why It Matters |
|---|---|
Sensitive Information Exposure | Information entered into AI tools may be stored, processed, or shared in ways that are not appropriate for sensitive University data. |
Inaccurate or Misleading Outputs | AI systems can generate incorrect, incomplete, or misleading information that appears convincing. |
Connected Data & Applications | Some AI tools can access connected files, email, calendars, repositories, or third-party services. |
Persistent Memory & Context | Certain AI tools may retain information across conversations or sessions to personalize future interactions. |
Academic, Research, and Professional Integrity | Using AI-generated content without appropriate review, attribution, or authorization may violate academic, research, or professional expectations. |
Unapproved Tools or Features | Some AI tools or features (e.g., experimental models, external apps, or browser extensions) may not meet the University’s privacy or security requirements. |
Best Practices
Use University-Approved Tools
- Use Harvard-approved AI services whenever possible.
- Understand what protections apply to the tool you are using.
- Avoid using personal or consumer AI accounts for University business unless explicitly permitted.
Protect Sensitive Information
- Do not enter regulated, restricted, or highly sensitive information into AI tools unless specifically authorized.
- Follow Harvard data classification and handling requirements.
- Remove unnecessary personal or confidential information before sharing content with AI systems.
Understand Connected Features
- Review what files, applications, and accounts an AI tool can access.
- Grant only the permissions needed for the task.
- Disconnect integrations that are no longer necessary.
Review AI-Generated Content and Actions
- Verify important information against trusted sources.
- Carefully review summaries, recommendations, and generated content before using or sharing them.
- Do not assume AI-generated actions or suggestions are correct simply because they were produced by AI.
Be Mindful of Privacy and Copyright
- Respect privacy, confidentiality, and intellectual property requirements.
- Do not upload information about others unless authorized.
- Consider whether content may contain copyrighted, proprietary, or restricted material.
Use AI Responsibly in Academic and Professional Work
- Follow course, departmental, research, and workplace expectations regarding AI use.
- Cite or disclose AI assistance when required.
- Remember that you remain responsible for the accuracy and quality of your work.
Use Meeting and Recording Tools Carefully
- Use AI meeting assistants and note-taking tools only when approved by the University.
- Inform participants when AI tools are recording, transcribing, or summarizing a meeting.
- Follow applicable privacy and consent requirements.