Microsoft Teams: Use Copilot Chat after a call in Queues app

🚨 The Signal: Copilot Chat in Teams Queues now summarises recorded calls, extracting key details and insights. This automates information retrieval from customer interactions, potentially exposing sensitive call data to AI processing.

The Impact

All users interacting with recorded calls in Teams Queues are affected, increasing the risk of sensitive data exposure via AI processing.

• End Users: Risk of over-reliance on AI summaries, potentially missing critical nuances.
• Security Team: Increased surface area for data leakage and prompt injection with sensitive call data.
• Compliance Team: New considerations for data residency, retention, and privacy of AI-processed call content.
• Admins: Need to review and configure Copilot data handling policies for call recordings.

The Action

1. Review Microsoft Purview Data Loss Prevention (DLP) policies for Teams call recordings and Copilot interactions to prevent sensitive data exposure.
2. Configure Copilot data governance settings in the Microsoft 365 admin center to control data retention and processing for AI-generated summaries.
3. Educate users on the responsible use of Copilot Chat with sensitive call data, emphasising verification of AI-generated information.
4. Assess existing data classification labels in Microsoft Purview to ensure they adequately cover call recording content and its AI-generated derivatives.
5. Implement conditional access policies to restrict Copilot access based on device compliance or network location when handling sensitive call data.

Domain: Agentic-AI · Impact: high · Workload: Teams