OneNote: Suggested Artifact Creation in Copilot Notebooks

🚨 The Signal: Copilot Notebooks in OneNote now suggest and generate M365 artifacts (Word, Excel, PowerPoint) based on notebook content and M365 knowledge. This increases the potential for sensitive data proliferation and unauthorized content creation.

The Impact

All users are affected, increasing the risk of sensitive information being copied into new, potentially less secure, documents.

• End Users: Risk of inadvertently creating new documents with sensitive data.
• Security Teams: Increased surface area for data loss prevention and content governance.
• Data Owners: Challenge in tracking and controlling copies of sensitive information.
• Compliance Teams: Difficulty in ensuring data residency and classification adherence.

The Action

1. Review and update existing Microsoft Purview Data Loss Prevention (DLP) policies to include Copilot-generated content.
2. Implement or refine Microsoft Purview Information Protection (MIP) sensitivity labels for OneNote and M365 artifacts.
3. Educate users on responsible use of Copilot's artifact creation, emphasizing data sensitivity and classification.
4. Monitor Copilot usage logs for unusual patterns of document creation or data movement.
5. Assess the impact on existing data retention and eDiscovery policies for newly generated content.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps