Autenticare
Governance & Compliance · · 4 min

Do Not Train AI with Your Students' Data (Please)

LGPD is not a joke. Using free ChatGPT at school means gifting your students' data to OpenAI.

Fabiano Brito

Fabiano Brito

CEO & Founder

Do Not Train AI with Your Students' Data (Please)
TL;DR Asking teachers to use free ChatGPT with student data is an LGPD incident waiting to happen. A minor's data is sensitive by default. Solution: AI running in a Google Cloud VPC with a DPA contract, "Your data, your model" — nothing becomes public training data, everything is auditable by the ANPD.

Innovation without governance is legal risk. Full stop. In the rush to use AI, many higher education institutions are asking teachers and students to use personal ChatGPT accounts.

This is an LGPD disaster waiting to happen. And when it does, the liability falls on the institution — not on the teacher who was "just trying to help".

Personal ChatGPT vs Gemini Enterprise in VPC

Free personal account

ChatGPT / Gemini / Copilot free

  • Data may be used to train a public model
  • No DPA (data processing agreement) with vendor
  • No auditable LGPD legal basis
  • History in the teacher's account — leaves with them if they resign
  • Nothing acceptable in an ANPD inspection
Enterprise in VPC

Gemini Enterprise / Vertex AI

  • Contractual: data never trains a public model
  • Signed DPA, sub-processors listed
  • Encryption in transit and at rest
  • Access logs retained by the institution
  • Data residency in sa-east1 (SP)

Your Data, Your Model

At Autenticare, we follow the mantra "Your Data, Your Model". When we implement AI at your institution, it runs inside a VPC (Virtual Private Cloud) on Google Cloud — isolated, audited, and under your control.

⚠️ Minors = sensitive data by default Art. 14 of the LGPD requires a specific legal basis for children's and adolescents' data — specific parental consent, not the generic enrollment contract. Before go-live: DPIA signed by DPO, notice to guardians, public AI policy published on the website, accessible opt-out channel. ANPD inspections of higher education institutions are increasing — there is no room for improvisation.
Handing over your institution's intellectual property — lesson plans, grading, student history — to train a third party's algorithm is not smart strategy. It is negligence disguised as innovation.
LGPD Governance for Higher Education

Would your institution pass an ANPD inspection tomorrow?

Autenticare delivers: Google Cloud VPC in sa-east1, DPA with sub-processors, DPIA focused on minors, public AI policy, Workspace for Education with SSO, teacher and DPO training. No surprises.

Schedule assessment → Why Gemini vs ChatGPT

Also read