Guides for UK firms, councils and NHS teams on using ChatGPT, Copilot and other AI under UK GDPR, with names and NHS numbers masked before the AI sees them.
How to delete ChatGPT history on the web, iPhone and Android, what archive, memory and shared links keep, the 30 days after, and your UK GDPR right to erasure.
Remove track changes and comments in Word before a draft goes to the other side, a court or an AI tool: Windows, Mac and web steps, and the ICO view.
Yes, and deleting the chat may not delete the photo. What ChatGPT, Gemini, Claude and Copilot keep of an uploaded image, for how long, and what to cover first.
Anonymise your driving licence for an employer, car hire or insurer: cover your birth date and address, add a watermark, all in your browser.
After its label, your NI number comes back as [NINO_1]. Why GOV.UK says keep it to those who need it, where it hides in a file, and how to redact it before AI.
Watermark a passport copy for a landlord, employer or bank and redact what they don't need, or every field before an AI reads it. In your browser.
Need to anonymise a PowerPoint? Speaker notes, hidden slides, comments and a chart's workbook all travel in a .pptx. How to redact it before ChatGPT sees it.
Need to anonymise Excel data? Hidden sheets and rows, notes and pivot caches keep client names in a .xlsx. How to redact a spreadsheet before ChatGPT sees it.
Need to anonymise a CSV file first? Exports, .txt notes, LibreOffice .odt and RTF: how to strip client names from each before you upload a CSV to ChatGPT.
Need to anonymise a PDF for ChatGPT or Copilot? Drop it in, get the personal details back covered, uncover any you need, and download it as PDF, Word or TXT.
Need to anonymise a Word document for ChatGPT or Copilot? Drop in the .docx, names and client details come back covered, then download Word, PDF or TXT.
Author, company, template, GPS: how to remove metadata from PDF and Word files before you upload them to ChatGPT or Copilot, tested on an invented UK letter.
Paste a letter or file note and spot the personal data to remove before AI: covered in seconds, with a list to uncover, then download as PDF, Word or TXT.
Special category data under UK GDPR hides in payslips, fit notes and tribunal files. Where it sits, why Article 9 applies, and what to cut before a prompt.
Engagement letter AI clause for solicitors and accountants in England and Wales: what the SRA, PCRT and UK GDPR expect, and wording to copy.
Can NHS staff use ChatGPT? Only once the letter stops pointing to a patient. What UK GDPR, Caldicott and the DSPT expect, and what to remove before you paste.
Use of AI in court documents: since 1 July 2026 the TCC Guide says if in doubt, disclose. What you sign, what the CJC proposes, what stays in the firm.
The ICO says removing names and numbers is not effective anonymisation. What that leaves you holding under the UK GDPR, and how to test a file before it goes.
What a council officer can put into ChatGPT or Copilot, what must never leave, and the UK rules that decide it: UK GDPR, the ICO, the ATRS and section 170.
No tool is compliant by itself: your use of it is. The criteria that decide, the four assistants measured against them, and where UK transfers actually stand.
From OpenAI's pages: who it discloses to, how long a conversation lives, what the training switch does not stop, and whose company answers a UK user.
Anthropic's own pages: the training switch, the 30 days that become five years, the flagged chat kept for two, and where the data actually sits.
Google's own privacy hub is unusually blunt about human reviewers. Training, the 18 months, the 72 hours, and the three years that survive deletion.
Four products share the name, and the answer changes with each. Microsoft's own pages on training, human review, the Bing carve out and the UK's place.
Hiscox vs AXA vs CFC and three more UK routes to cyber cover, compared from their own wordings: limits, exclusions, excesses, and what they say about AI.