Power Apps: Form fill assistance in apps can provide suggestions for existing values

🚨 The Signal: Power Apps AI-powered form fill now suggests updates for existing field values, not just empty ones. This expands AI assistance, potentially increasing data accuracy but also the surface for data manipulation.

The Impact

Power Apps users are affected by AI-driven data modification, introducing a risk of unintended data changes or exposure if not properly governed.

• End-users: Risk of inadvertently accepting incorrect AI suggestions, leading to data integrity issues.
• Data Owners: Potential for AI-driven changes to sensitive data without explicit user intent.
• Security Teams: Need to assess AI model's data handling and potential for prompt injection or data leakage.
• Compliance Teams: Requires review of AI-assisted data modification against regulatory and policy requirements.

The Action

1. Review Power Apps Data Loss Prevention (DLP) policies for model-driven apps to ensure appropriate data handling.
2. Educate users on the AI assistance feature, emphasising verification of suggested changes before acceptance.
3. Assess the AI model's data sources and training data for potential biases or vulnerabilities that could lead to incorrect suggestions.
4. Monitor Power Apps audit logs for unusual data modification patterns potentially linked to AI assistance.
5. Consult ASD ISM controls for AI system assurance (e.g., ISM 17.2.1, 17.2.2) to ensure compliance.

Domain: Agentic-AI · Impact: medium · Workload: Other