Microsoft Purview: Data Lifecycle Management – Retention for Copilot Memory

🚨 The Signal: Microsoft Purview now supports retention policies for Copilot memory, including inferred details and saved memories. This enables organisations to preserve historical versions of Copilot interactions for compliance, security investigations, and auditing purposes.

The Impact

Security and compliance teams are affected by new data retention capabilities for Copilot memory, reducing eDiscovery and audit risks.

• Security Teams: Reduced risk of data loss or unrecoverable Copilot interaction history during investigations.
• Compliance Teams: Improved ability to meet regulatory data retention requirements for AI interactions.
• Legal Teams: Enhanced eDiscovery capabilities for Copilot-generated content and user interactions.
• Administrators: New configuration options for Purview retention policies specific to Copilot memory.

The Action

1. Navigate to Microsoft Purview compliance portal > Data lifecycle management > Microsoft 365 retention policies.
2. Create a new retention policy or modify an existing one.
3. Select 'Copilot memory' as a location for the retention policy.
4. Define retention settings (e.g., retain for a specific period, then delete).
5. Publish the policy to applicable users or the entire organisation.

Domain: Purview · Impact: high · Workload: Microsoft Purview · Essential Eight: Regular Backups · ISM: ISM-1511, ISM-1515, ISM-1705, ISM-1706, ISM-1707, ISM-1708, ISM-1810, ISM-1811, ISM-1812, ISM-1813, ISM-1814