Microsoft Copilot (Microsoft 365): Power BI reports as references in Copilot Notebooks

🚨 The Signal: Copilot Notebooks can now reference Power BI reports, allowing AI to generate outputs based on sensitive business data. This expands the data sources Copilot can access, increasing potential for data exposure.

The Impact

All users with Copilot and Power BI are affected, increasing the risk of sensitive data exposure through AI-generated content.

• End users: Risk of inadvertently exposing sensitive Power BI data in Copilot outputs.
• Security team: Increased surface area for data leakage and compliance challenges.
• Data owners: Need to re-evaluate data classification and access policies for Power BI reports used by Copilot.
• Compliance officers: New considerations for data residency and handling with AI processing.

The Action

1. Review Power BI report sensitivity labels and access permissions to ensure appropriate data handling.
2. Educate users on responsible use of Power BI reports within Copilot Notebooks, emphasizing data sensitivity.
3. Monitor Copilot usage logs for unusual access patterns or data exposure incidents related to Power BI.
4. Assess existing data loss prevention (DLP) policies for Copilot to ensure they cover Power BI data integration.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps