Option 1: Nonprofit staff are already using ChatGPT. The real risk is using it without guardrails. This plain-language Canada-focused guide explains what “confidential” really means at work, what should never be entered, what’s low-risk, and the simple staff rules that prevent most AI privacy incidents.

Nonprofit teams are already using ChatGPT, often without shared boundaries. This board-ready checklist helps you set practical guardrails on data, allowed use-cases, human review, vendor risk, incident response, and policy review so staff can use AI safely without gambling trust.