A nonprofit's program manager wants to analyze donor feedback with Claude. The feedback file includes donor names, email addresses and donation amounts, and she isn't sure whether the organization's policy allows donor data in Claude at all. Select the two most appropriate actions.

Answer: B and D — Strip out names, emails and any other fields the feedback analysis doesn't need before using the data. / Check with the organization's privacy or data-protection contact about whether, and in what form, donor data may be used in Claude.

Minimizing the data to what the task needs (b) and asking the responsible team when policy is unclear (d) both act before data is shared. An instruction to the model (a) is not a policy control. Being a nonprofit (c) doesn't exempt an organization from privacy laws such as GDPR or from its own policies.