Outlook: People Hub improvements in new Outlook for Windows

🚨 The Signal: Outlook's People Hub now automatically links duplicate contacts and enriches profiles with organizational data. This centralizes contact information, potentially exposing more internal data if not properly governed.

The Impact

All users are affected, with a moderate risk of increased internal data exposure through consolidated contact information.

• End Users: Consolidated contact views may inadvertently expose more internal data.
• Security Teams: Need to assess data exposure risks from enriched profiles.
• Admins: Must review data governance policies for contact information.
• Compliance Teams: Potential for non-compliance with data handling regulations.

The Action

1. Review Microsoft 365 data governance policies related to contact information and organizational profiles.
2. Assess existing data loss prevention (DLP) policies for Outlook and M365 Apps to ensure sensitive internal data is not inadvertently exposed.
3. Communicate to users about the new People Hub features and best practices for handling contact information.
4. Monitor audit logs for unusual access patterns to contact data or organizational profiles.

Domain: M365-Apps · Impact: medium · Workload: M365 Apps