Microsoft Edge: Commercial Journeys - AI-powered task completion for Microsoft 365 Copilot users
🚨 The Signal: Microsoft Edge will use AI to proactively surface unfinished tasks for Copilot Premium users, generating content like emails and documents. This increases data exposure risk by automating content creation and task completion.
The Impact
Copilot Premium users are affected, increasing the risk of sensitive data exposure through AI-generated content and automated workflows.
- Security Teams: Increased risk of data exfiltration via AI-generated content.
- End Users: Potential for over-reliance on AI, leading to less scrutiny of sensitive data.
- Compliance Teams: New challenges in auditing and governing AI-generated content.
- Identity Teams: Need to ensure Copilot Premium licenses are assigned appropriately.
The Action
- Review and update Microsoft Purview Data Loss Prevention (DLP) policies to include AI-generated content as a sensitive information type.
- Implement Microsoft Purview Communication Compliance policies to monitor AI-generated content for inappropriate sharing.
- Educate Copilot Premium users on responsible AI use, data sensitivity, and verification of AI outputs.
- Configure Microsoft Edge browser policies to restrict data sharing with third-party AI services if applicable.
- Regularly audit Copilot usage logs for unusual activity or data access patterns.
Domain: Agentic-AI · Impact: high · Workload: M365 Apps