Microsoft 365 Copilot: Capture voice notes in the Microsoft 365 Copilot mobile app

🚨 The Signal: Microsoft 365 Copilot mobile app will gain a 'Record' feature, transcribing and summarising voice notes and conversations. This expands data capture vectors, increasing the scope of data under M365 compliance controls.

The Impact

Users with Copilot licenses are affected, increasing the risk of sensitive information capture and storage if not properly governed.

• End users: New capability to record conversations, potentially capturing sensitive data.
• Security Team: Increased data surface area for compliance, eDiscovery, and data loss prevention.
• Admins: Need to review and potentially update data governance policies for audio and transcribed content.
• Compliance Officers: Requires validation that existing Purview policies adequately cover new data types.

The Action

1. Review Microsoft Purview Data Loss Prevention (DLP) policies to ensure coverage for audio files and transcribed text.
2. Assess Microsoft Purview Retention Policies and Labels for audio recordings and AI-generated summaries.
3. Communicate to end-users the appropriate use and sensitivity considerations for the new recording feature.
4. Verify eDiscovery search capabilities include audio and transcribed content from Copilot mobile recordings.
5. Consider Intune App Protection Policies (APP) for Copilot mobile app to restrict data sharing of recordings.

Domain: Purview · Impact: high · Workload: Microsoft Purview