Microsoft Viva: Viva Insights - Skills landscape report for organizations

🚨 The Signal: A new Power BI report in Viva Insights maps organizational skills. This change provides new visibility into workforce capabilities, potentially exposing sensitive employee data related to skills and performance, requiring careful data governance.

The Impact

HR and security teams are affected by new data insights, creating a risk of sensitive data exposure if not properly governed.

• HR teams: New insights into skills, but increased responsibility for data privacy.
• Security teams: New data source to protect, requiring access control and monitoring.
• Privacy officers: New data processing activity to assess for compliance.
• Employees: Their skill data is now aggregated and reported, raising privacy concerns.

The Action

1. Review Viva Insights data processing and retention policies in Microsoft 365 admin center.
2. Implement strict access controls for the Power BI report, limiting viewership to essential personnel.
3. Conduct a Privacy Impact Assessment (PIA) for the new skills landscape report.
4. Communicate data handling practices for skill data to employees.

Domain: Other · Impact: medium · Workload: Other