Web content setting in Microsoft 365 Copilot expands across Copilot experiences and moves to Settings

🚨 The Signal: Microsoft 365 Copilot's web content setting is moving to a centralized location and expanding to Copilot Chat. This gives users more control over web search grounding, impacting data exposure and compliance.

The Impact

Microsoft 365 Copilot and Copilot Chat users are affected, with a moderate security risk related to data exposure via web search.

• Copilot users: Increased control over web search, but also potential for unintended data exposure if enabled.
• Copilot Chat users: New ability to enable/disable web search, introducing a new vector for data grounding.
• Security teams: Need to educate users on the implications of web search for sensitive data.
• Compliance teams: Requires review of existing AI usage policies regarding external data sources.

The Action

1. Review existing organizational policies on Copilot's access to external web content.
2. Communicate to users the location of the new 'Web content' setting under Settings > Personalization > Advanced Settings.
3. Educate users on the security and privacy implications of enabling web search in Copilot experiences.
4. Monitor Copilot usage logs for web content grounding activities, if available.

Domain: Agentic-AI · Impact: medium · Workload: M365 Apps