You will be able to say why the same assistant can be acceptable on one account and not on another.
Jia Hui is a marketing executive at a furniture retailer in Ubi. On Monday she uses ChatGPT on her phone to plan a friend's birthday dinner. On Tuesday she opens the same app and pastes in the draft of next quarter's promotion plan, because it's quicker than logging in to the tool her company set up. To her it's the same assistant. To her employer, and to the law, it's two very different things.
The difference is the account. Lesson 1.1, What happens to the words you type into an assistant, showed that your settings decide a lot about where a prompt ends up. The type of account you're signed in with decides even more, and it's the part most people never look at.
Most assistants come in a free version and one or more paid personal plans. These are sold to you as an individual, and you accept the provider's terms by clicking through them.
Those terms often give the provider room to use your conversations to improve its models. That's the training question from lesson 1.1. Many providers now offer a switch to opt out, but the switch is usually on by default, it can sit a few screens deep, and its name varies from one product to the next. Paying for a personal plan doesn't automatically change this. A paid personal plan buys you more features and higher limits. It doesn't necessarily buy you different data rules.
There's a second point that matters more at work. With a personal account, the agreement is between you and the provider. Nobody else is a party to it. If something goes wrong, there's no contract your employer negotiated, no administrator who can see what was shared, and no way for the company to delete it on your behalf.
Business, team and enterprise plans are sold to organisations. They usually come with a separate commercial agreement, and that agreement typically says the provider won't use the customer's data to train its models. Many also include a data processing agreement, which sets out how the provider handles personal data on the organisation's behalf.
They also give the employer admin controls: settings that someone in IT or operations manages for everyone, such as who may sign in, how long chat history is kept, which connectors are allowed, and whether conversations can be exported for an investigation. Some plans let the company choose the region where data is stored.
None of this makes a business account risk-free. It means the risks have been looked at by someone whose job it is to look at them, and the company has written promises it can enforce.
So when Jia Hui uses the company's approved assistant, her promotion plan sits under an agreement her employer signed, with settings her IT team chose. When she pastes the same plan into her personal app, it sits under terms she clicked through on her phone a year ago and has never reread.
Most people who paste work into a personal account mean well. The approved tool is slower, or it isn't on their phone, or they don't know one exists. But the effect is the same each time: work data leaves the company's systems and goes somewhere the company didn't agree to and can't see.
If the data includes customers' names or contact details, that may be a disclosure under Singapore's Personal Data Protection Act, which module 2 covers. If it includes a client's plans, it may breach a confidentiality clause. And if the company is ever asked what happened to that data, it can't answer, because it never knew.
Picture a small tuition centre in Tampines where a part-time tutor pastes a parent's complaint email, with the child's name and school, into a free assistant to draft a calm reply. The reply is good. The centre now has a pupil's details sitting in an account it doesn't control, under terms it never saw. Nothing bad may ever come of it. But the centre can no longer say where that information is.
The details in this lesson are patterns, not promises about any single product. Providers change their plans, their names for settings and their policies, sometimes several times a year. A plan that trained on chats last year may not now, and the reverse can happen too.
So don't rely on what a colleague told you, what you read in a news story, or what was true when you signed up. Read the provider's current privacy policy and, for work, the terms of the plan your company is actually on. If you can't find the plan terms, ask whoever manages the tool. That's a normal question, and a good IT or compliance team will be glad you asked it.
Here's a simple rule you can use straight away. At home, on your own account, you decide what you're comfortable sharing, using the three groups from lesson 1.1. At work, the question is different: has my employer approved this tool and this account for this kind of data? If you don't know the answer, treat it as no until you find out.
Jia Hui didn't know whether her company had an approved assistant at all. It took one message to her manager to find out that it did, and that the list of approved tools was sitting on the staff intranet. Your next step is to find the same answer for your own workplace, and to note exactly where it's written down so you can check it again when things change.
Find out which AI tools and account types your employer has approved, and write down where that information is published.
Junxiong-WFG Organisation is an authorised representative of AIA Financial Advisers Private Limited (Reg. No. 201715016G).