(Updated) Classic Outlook for Windows: User-initiated insights with Copilot

🚨 The Signal: Copilot in classic Outlook for Windows now offers user-initiated insights, allowing users to highlight text and prompt Copilot for contextual information. This increases data exposure risk through AI processing of sensitive email content.

The Impact

Users with Copilot capabilities are affected, increasing the risk of inadvertent exposure of sensitive email content to AI processing.

• End users: Risk of unintentionally processing sensitive data with AI.
• Security teams: Increased surface area for data leakage and prompt injection.
• Compliance officers: New considerations for data residency and AI processing of regulated data.

The Action

1. Review and update Microsoft 365 Copilot data governance policies to address user-initiated insights.
2. Communicate to users the implications of using Copilot with sensitive email content.
3. Monitor Copilot usage logs for unusual activity or data processing patterns.
4. Evaluate existing Microsoft Purview Data Loss Prevention (DLP) policies for Copilot integration.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps