Microsoft Teams: Default Teams Calling global policy to enable users to transcribe or record calls

🚨 The Signal: Microsoft Teams will now default to enabling call recording and transcription for new tenants and existing tenants who haven't modified the global calling policy. This broadens access to AI features but increases data capture risk.

The Impact

All users in affected tenants can now record and transcribe calls, increasing the risk of sensitive data exposure and compliance breaches.

  • End users: Can record/transcribe calls, increasing risk of sensitive data capture.
  • Security Team: Increased surface area for sensitive data, requiring new data governance policies.
  • Compliance Team: New default settings may violate data privacy regulations without intervention.
  • Legal Team: Potential for unapproved recordings to create legal discovery challenges.

The Action

  1. Review existing Teams calling policies via Teams Admin Center > Voice > Calling policies.
  2. Identify if the global policy has been modified; if not, it will be affected.
  3. Create or modify a custom calling policy to disable 'Allow cloud recording' and 'Allow transcription' if not desired.
  4. Assign the custom policy to relevant users or groups to enforce restrictions.
  5. Communicate updated recording and transcription policies to all users.

Domain: Teams · Impact: high · Workload: Teams