Microsoft Teams: Meeting Shared Files

🚨 The Signal: Microsoft Teams meetings now automatically share files and links added during the meeting with all participants. These files also become grounding data for AI agents, increasing data exposure and potential for unintended information disclosure.

The Impact

All users are affected by increased data sharing, raising the risk of sensitive information exposure via meeting files and AI agents.

• End Users: Risk of inadvertently sharing sensitive files with all meeting participants.
• Security Team: Increased surface area for data leakage and compliance violations.
• Compliance Team: New considerations for data retention and access policies.
• AI Governance: AI agents may access and process sensitive data from shared files.

The Action

1. Review existing Microsoft Teams file sharing policies for meetings.
2. Communicate best practices for sharing sensitive information in Teams meetings to end-users.
3. Evaluate Microsoft Purview Data Loss Prevention (DLP) policies for Teams and SharePoint to prevent oversharing.
4. Assess Copilot data handling policies to ensure sensitive information is not inadvertently processed by AI agents.

Domain: Teams · Impact: high · Workload: Teams