New challenges for data protection with AI-powered assistants

Microsoft Copilot, an AI assistant for Microsoft 365, boosts productivity but raises data security concerns, such as:
• Oversharing sensitive info due to incorrect permissions
• Dependence on user-driven sensitivity labels
• Need for strong data protection strategies
Organizations should:
• Ensure prompt visibility for user interactions
• Conduct permission audits with CASB and DLP
• Update missing Purview sensitivity labels
• Fix misconfigurations with SSPM
• Block sensitive data in Copilot prompts using inline DLP
A platform-based data protection approach, like Gartner's Security Service Edge (SSE) framework, is recommended for securing Copilot. Explore this white paper to enhance data security.