PROTECTING SENSITIVE DATA USED BY LARGE LANGUAGE MODELS

1 . A method for protecting sensitive data, the method comprising:

generating a rule set for handling sensitive data;

receiving, via a natural language processing tool, a request from a user;

retrieving data associated with the request, wherein the data includes at least one of text data, image data, video data, audio data, virtual reality data, or gesture data;

determining a sensitive data portion of the data;

labeling the sensitive data portion of the data;

operating on the sensitive data portion according to the rule set based on the labeling to generate modified data; and

returning the modified data to the user.

2 . The method of claim 1 , wherein operating on the sensitive data portion includes deleting the sensitive data portion, the method further comprising storing the data without the sensitive data portion.

3 . The method of claim 1 , wherein operating on the sensitive data portion includes replacing the sensitive data portion with generic data.

4 . The method of claim 1 , wherein the request includes handling instructions for the sensitive data portion, and wherein operating on the sensitive data portion includes executing the handling instructions according to the rule set.

5 . The method of claim 4 , the method further comprising:

presenting a response interface to the user, the response interface including a prompt for the handling instructions; and

receiving the handling instructions via the response interface.

6 . The method of claim 1 , further comprising detecting a location associated with the request, wherein the rule set includes a location-based handling instruction, and wherein the location associated with the request includes a user location or a data storage location.

7 . The method of claim 6 , wherein the data storage location is a cloud storage including a plurality of storage nodes, wherein the location-based handling instruction includes allowing storage on a first storage node in the plurality of storage nodes and preventing storage on a second storage node in the plurality of storage nodes.

8 . The method of claim 1 , wherein determining the sensitive data portion of the data includes at least one of:

applying a machine learning model trained on a training data of a plurality of previous requests including a plurality of previous sensitive data,

reading a previous label for the data indicating the sensitive data portion, or

receiving input of the sensitive data portion from a user.

9 . The method of claim 8 , further comprising:

retraining the machine learning model using the sensitive data portion and the labeling.

10 . The method of claim 1 , further comprising:

receiving, via the natural language processing tool, a data retrieval request from the user;

retrieving previously-labeled sensitive data associated with the data retrieval request; and

returning the previously-labeled sensitive data to the user according to the rule set based on the label of the previously-labeled sensitive data.

11 . The method of claim 1 , wherein returning the modified data to the user includes issuing the sensitive data to the user with a warning of sensitive data use.

12 . A system for protecting sensitive data, the system comprising:

computing hardware of at least one processor and memory operably coupled to the at least one processor; and

instructions that, when executed on the computing hardware, cause the computing hardware to implement:

a natural language processing tool configured to receive a request from a user,

a data management engine configured to retrieve data associated with the request and label sensitive data portion of the data, wherein the data includes at least one of text data, image data, video data, audio data, virtual reality data, or gesture data,

a detection engine configured to determine a sensitive data portion of the data,

a handling engine configured to generate a rule set and operate on the sensitive data portion according to the rule set based on the labeling to generate modified data, and

wherein the natural language processing tool is further configured to return the modified data to the user.

13 . The system of claim 12 , wherein the handling engine is configured to operate on the sensitive data portion including by deleting the sensitive data portion, wherein the data management engine is further configured to store the data without the sensitive data portion.

14 . The system of claim 12 , wherein the natural language processing tool is further configured to:

present a response interface to the user, the response interface including a prompt for the handling instructions; and

receive the handling instructions via the response interface.

15 . The system of claim 12 , wherein the handling engine is configured to operate on the sensitive data portion by detecting a location associated with the request, wherein the rule set includes a location-based handling instruction, and wherein the location associated with the request includes a user location or a data storage location.

16 . The system of claim 15 , further comprising:

a cloud storage including a plurality of storage nodes,

wherein the location-based handling instruction includes allowing storage on a first storage node in the plurality of storage nodes and preventing storage on a second storage node in the plurality of storage nodes.

17 . The system of claim 12 , wherein the detection engine is configured to determine the sensitive data portion of the data including at least one of:

applying a machine learning model trained on a training data of a plurality of previous requests including a plurality of previous sensitive data,

reading a previous label for the data indicating the sensitive data portion, or

receiving input of the sensitive data portion from a user.

18 . The system of claim 17 , wherein the detection engine is further configured to retrain the machine learning model using the sensitive data portion and the labeling.

19 . The system of claim 12 , wherein returning the modified data to the user includes issuing the sensitive data to the user with a warning of sensitive data use.

20 . A machine learning model trained on training data of a plurality of previous natural language requests including a plurality of previous sensitive data, the machine learning model configured to:

receive a natural language request from a user;

determine data associated with the request;

determine a sensitive data portion of the data;

determine a handling instruction for the sensitive data portion; and

return the sensitive data portion to the user according to the handling instruction.