Power Apps: Form fill assistance using speech as input in model-driven apps

🚨 The Signal: Power Apps model-driven apps now support speech-to-text for form filling, enabled by default. This introduces a new input vector for data entry, with transient recordings not saved, but potential for sensitive data exposure via transcription.

The Impact

All users of model-driven Power Apps are affected, with a low security risk of accidental sensitive data exposure during transcription.

• End users: May inadvertently dictate sensitive information into forms.
• Security teams: Need to assess data handling policies for voice input.
• Compliance teams: Must review privacy impact assessments for new input methods.

The Action

1. Review existing data handling policies for voice input and transcription services.
2. Communicate to users about appropriate data to dictate into Power Apps forms.
3. Assess if disabling this feature is necessary for specific high-sensitivity applications via Power Apps admin settings (if available).

Domain: Other · Impact: low · Workload: Other