National Archives and Records Administration Bans ChatGPT on Agency Laptops Over Data Leak Concerns

The National Archives and Records Administration (NARA) has banned the use of ChatGPT on agency-issued laptops, citing concerns over the security of confidential data. Starting May 6, 2024, NARA will block access to ChatGPT on its internal network and on NARA-issued devices.

Keith Day, NARA's chief information security officer, expressed concerns about the risk of internal government data being incorporated into ChatGPT's responses and potentially exposing sensitive information. "NARA has determined that ChatGPT's unrestricted approach to reusing input data poses an unacceptable risk to the agency's data security," Day stated.

The agency is particularly worried about sensitive government information becoming part of ChatGPT's 'living data set' without the ability to remove or purge it. Reports of personally identifiable information and corporate proprietary data appearing in ChatGPT and other AI services have intensified these apprehensions.

As a substitute, NARA is considering the use of Microsoft Copilot or Google Gemini, which may offer more controlled and secure options for the agency's requirements. These AI solutions provide similar services to ChatGPT but in a more controlled environment where data input by federal agencies is placed in a private repository and not shared with others.

Why this matters: NARA's decision to ban ChatGPT highlights the growing concerns among government agencies regarding the security risks associated with AI technologies. As federal agencies seek to leverage AI while mitigating risks, establishing clear policies and safeguards becomes critical to safeguard sensitive data.

This move by NARA is part of a broader effort by the Biden administration to establish more consistency across agencies' AI policies. The Office of Management and Budget is issuing a governmentwide policy on how agencies should leverage AI while mitigating risks, requiring them to define concrete safeguards and increase transparency around their use of AI.

NARA's ban on ChatGPT for business purposes underscores the agency's commitment to protecting sensitive, non-public information from potential exposure through AI models. As the agency explores alternative AI solutions like Microsoft Copilot and Google Gemini, it seeks to balance the benefits of AI integration with the need to maintain data security and confidentiality.

Key Takeaways

• NARA bans ChatGPT on agency devices due to data security concerns.
• NARA considers Microsoft Copilot and Google Gemini as more secure AI alternatives.
• NARA's decision reflects broader efforts to establish AI policies across federal agencies.
• NARA aims to balance AI benefits with maintaining data confidentiality and security.
• The ban underscores NARA's commitment to protecting sensitive government information.