Outlook: Use Copilot to select and rewrite specific pieces of text in an email in classic Outlook for Windows

🚨 The Signal: Copilot in classic Outlook for Windows now allows users to rewrite selected email text, modifying tone and length. This introduces new avenues for data manipulation and potential information leakage via AI processing.

The Impact

All users are affected, with a moderate risk of unintended information disclosure or content alteration due to AI processing.

• End-users: Risk of inadvertently sharing sensitive information through AI processing.
• Security Teams: New vector for data leakage and content integrity concerns.
• Compliance Teams: Increased complexity in demonstrating data handling compliance.

The Action

1. Review and update existing Acceptable Use Policies to include AI-assisted content generation.
2. Educate users on responsible AI use, emphasizing not to input sensitive data into Copilot.
3. Monitor Microsoft Purview Audit logs for Copilot activities related to content generation.
4. Evaluate Microsoft 365 sensitivity labels and DLP policies for AI-generated content.

Domain: Agentic-AI · Impact: medium · Workload: M365 Apps