Teams Meeting Recap App Centralises Content for 30 Days

🚨 The Signal: Microsoft Teams now centralises meeting recaps, including audio, for 30 days. This increases the persistence and accessibility of potentially sensitive meeting content.

The Impact

End users can access meeting recaps for 30 days, increasing the risk of unauthorised access to sensitive information if not properly secured.

• End Users: Increased accessibility to meeting content for 30 days may expose sensitive information if not appropriately classified or secured.
• Security Teams: New centralisation requires review of existing data retention and access policies to ensure compliance and minimise data exposure.
• Compliance Teams: The 30-day retention period for recaps necessitates verification against regulatory and organisational data retention requirements.

The Action

1. Review existing Microsoft Teams data retention policies in Microsoft Purview for meeting content.
2. Assess current access controls for meeting recordings and recaps to ensure least privilege is applied.
3. Communicate to end users about the new meeting recap functionality and best practices for handling sensitive information in meetings.

Domain: Teams · Impact: medium · Workload: Teams