OneDrive: Anchored comments in the PDF viewer

🚨 The Signal: OneDrive and SharePoint PDF viewers now support anchored comments, @mentions, and replies, mirroring Office document collaboration. This enhances user collaboration but increases potential for information disclosure if not managed.

The Impact

All users are affected, with a moderate security risk due to increased potential for sensitive information exposure in comments.

• End users: New collaboration features may inadvertently expose sensitive data.
• Security Team: Increased surface area for data leakage through comments.
• Compliance Team: New data points to consider for eDiscovery and retention policies.

The Action

1. Review existing data loss prevention (DLP) policies for OneDrive and SharePoint to ensure comments are included in sensitive information type detection.
2. Communicate best practices to users regarding commenting on sensitive PDF documents.
3. Consider implementing or refining information barriers if specific departments handle highly sensitive PDFs.

Domain: SharePoint · Impact: medium · Workload: OneDrive