Microsoft OneNote: Multimodal recording in Copilot Notebooks on Windows

🚨 The Signal: OneNote Copilot Notebooks on Windows will capture audio, images, and notes, then use Copilot to summarise. This expands data capture vectors, increasing the scope of sensitive information processed by AI, requiring enhanced data governance.

The Impact

Users with Copilot licenses can record multimodal data, increasing the risk of sensitive information being captured and processed by AI without explicit governance.

• End Users: Risk of inadvertently capturing sensitive data during meetings or conversations.
• Security Teams: Increased scope for data loss prevention (DLP) policy enforcement and monitoring.
• Data Governance Teams: New data types and sources require updated retention and classification policies.
• AI Governance Teams: Expanded AI processing of potentially sensitive data requires review of ethical AI use and data handling.

The Action

1. Review and update Microsoft Purview Data Loss Prevention (DLP) policies to include OneNote and Copilot Notebooks for multimodal content.
2. Assess existing Microsoft Purview Information Protection (MIP) sensitivity labels for applicability to new multimodal data types captured in OneNote.
3. Communicate updated data handling guidelines to users regarding multimodal capture in Copilot Notebooks, emphasising sensitive information.
4. Evaluate Microsoft 365 Copilot data governance settings to ensure alignment with organisational data residency and privacy requirements.
5. Consider implementing specific retention policies in Microsoft Purview for multimodal content captured within Copilot Notebooks.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps