Microsoft Copilot (Microsoft 365): [Copilot Chat] Search for meetings organized by a specific person

🚨 The Signal: Copilot Chat now allows users to search for meetings organized by specific individuals. This enhances information retrieval but increases the risk of inadvertent disclosure of calendar metadata and meeting participation.

The Impact

All users are affected, increasing the risk of unintended disclosure of meeting participation and calendar information through Copilot Chat.

• End-users: Increased risk of inadvertently exposing meeting details to Copilot Chat.
• Security Teams: Potential for broader access to meeting metadata than intended.
• Compliance Teams: New considerations for 'Need to Know' principles regarding calendar data.

The Action

1. Review existing Copilot data governance policies for calendar data access.
2. Communicate to users about the new search capability and responsible use of Copilot Chat for sensitive meeting information.
3. Monitor Copilot Chat usage logs for unusual patterns of meeting information queries.

Domain: Agentic-AI · Impact: medium · Workload: M365 Apps