When to report
Report a restricted upload, unexpected data exposure, invented material claim, unauthorized publication, inappropriate automated decision or suspected evasion of the tool register. Do not wait until an outside party notices. Early reporting can narrow the spread and will be considered when conduct is reviewed.
Preserve the record
Record the tool, account, prompt, input type, output, recipients, date and any documents that repeated the material. Do not delete a conversation or quietly overwrite a published page to make the record look cleaner. Correcting the page may be urgent; concealing how the error arrived is a separate problem.
Coordinated response
IT Security addresses access and data movement. Legal assesses obligations and statements. Communications manages corrections to published materials. Internal Audit maps the control failure. The business owner identifies decisions made in reliance on the output. The Center of Excellence decides whether the approved use case should pause while those facts are established.
Return to use
A revised workflow names the source checks, ownership and monitoring that were missing. A new training slide may be part of the response; it is not evidence that a legal or customer consequence has been resolved.
