Copilot Notebooks: Suggested artifacts for faster content creation

🚨 The Signal: Copilot Notebooks will suggest content artifacts (Word, Excel, PowerPoint) based on existing M365 data. This increases the potential for sensitive information to be surfaced and reused, impacting data governance and exposure risks.

The Impact

Users with Copilot Notebooks are affected, increasing the risk of unintended sensitive data exposure and reuse.

• End users: Increased risk of inadvertently including sensitive data in new artifacts.
• Security teams: Enhanced need for data loss prevention (DLP) monitoring and policy enforcement.
• Data owners: Potential for sensitive information to be surfaced and reused without explicit consent.
• Compliance officers: Greater challenge in maintaining data residency and classification standards.

The Action

1. Review and strengthen Microsoft Purview Data Loss Prevention (DLP) policies for Copilot interactions.
2. Educate users on responsible AI use and data handling within Copilot Notebooks.
3. Implement or refine sensitivity labels for documents that may be referenced by Copilot.
4. Monitor Copilot usage logs for unusual data access patterns or artifact creation.
5. Assess existing data classification and governance frameworks for Copilot integration.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps