Microsoft Viva: Viva Learning - Ability to view inferred skills and course recommendations

🚨 The Signal: Viva Learning will now infer user skills from M365 activity to recommend courses. This increases data collection and processing, impacting user privacy and potentially exposing skill profiles.

The Impact

All M365 users are affected by increased data collection, posing a privacy risk and potential for skill profile exposure.

• End Users: Personal M365 activity is processed, raising privacy concerns.
• Security Teams: New data processing requires review for compliance with privacy policies.
• Privacy Officers: Increased data collection necessitates updated privacy impact assessments.
• Administrators: Need to understand data flow and user controls for skill inference.

The Action

1. Review Microsoft's privacy documentation for Viva Learning's inferred skills feature.
2. Update internal privacy impact assessments (PIAs) to include this new data processing.
3. Communicate to end-users about the new skill inference and recommendation capabilities.
4. Investigate options to disable or limit skill inference if privacy concerns are high.

Domain: Other · Impact: medium · Workload: Other