Library › Cybersecurity AI › Nurses and healthcare workers

Decline an emailed request for a patient list

  • For Nurses and healthcare workers
  • You practice Giving the right context
  • Time about 5 minutes

About this exercise

Someone claiming to be from your billing vendor emailed asking for a patient list. Your policy: patient information is never sent by email, even to known vendors, and vendors must request data through the secure vendor portal. Write a polite reply of at most 3 sentences that says so, and don't use any contact details from their email. Sign off with 'Thank you, Riverbend Billing Office'. Plain text, under 70 words.

Common mistakes when you ask AI for this

  • Helping too much. The AI offers to call the number in the email or send partial data. Try: Say: "Don't use any contact details from their email."
  • Not naming the process. The AI says 'we can't share this' without saying how vendors should ask. Try: Add: "Point them to the secure vendor portal."
  • Wrong tone or sign-off. The AI calls it a scam or signs 'Best regards, [Name]'. Try: Ask: "Polite, no accusation. Sign off: Thank you, Riverbend Billing Office."
  • Too long. The AI explains privacy law in the reply. Try: Limit it: "At most 3 sentences."
  • Letting markdown in. AI adds bold and headings by default, and in an email they show up as stray symbols. Try: Add: "Plain text only, no bold, no headings."

What a strong prompt includes

  • Points to the portal
  • Avoids their contact details
  • Sets tone and sign-off
  • Limits the sentences
  • Asks for plain text

Practice this now ↑

Related exercises