OneNote: New Copilot Notebooks design in the Microsoft 365 Copilot app (DoD, GCC, GCC High)

🚨 The Signal: Copilot Notebooks in the Microsoft 365 Copilot app now offer a persistent AI workspace, allowing Copilot to retain context across sessions. This enhances AI interaction continuity but centralizes sensitive data within the AI's memory.

The Impact

All users are affected by the new Copilot Notebooks design, increasing the risk of sensitive information exposure through persistent AI context.

  • End users: Risk of oversharing sensitive data with persistent AI context.
  • Security teams: Increased surface area for data leakage via AI memory.
  • Compliance officers: New challenges for data retention and eDiscovery in AI workspaces.

The Action

  1. Review and update data classification policies for AI-generated content.
  2. Educate users on appropriate data input into Copilot Notebooks.
  3. Monitor Copilot usage for sensitive data handling and compliance.
  4. Evaluate existing data loss prevention (DLP) policies for AI interactions.

Domain: Agentic-AI · Impact: medium · Workload: M365 Apps