Users should be notified at the start of a session that they must not include PI, SPI, or PHI. Also, users should be notified that they should always verify the AI output before relying on the information received.