Regaining Control Over Unmanaged GenAI Apps: New Microsoft Purview Enhancements in Edge

on
Many organizations are growing increasingly concerned about the widespread use of unsanctioned Generative AI (GenAI) tools. These apps, often accessed through unmanaged browsers, pose significant risks to data security and compliance. To help with this, Microsoft is now updating some features in  Microsoft Purview that will enhance policy enforcement for unmanaged cloud apps accessed via the Edge browser.  What’s Changing? Previously, enforcing Purview Data Loss Prevention (DLP) and Collection policies required manual creation of Edge configuration policies. These policies were often complex and needed to be scoped correctly to block unsupported browsers or apply protections. With this update, Microsoft automates much of that process: Collection Policies now apply directly within Edge without needing a separate blocking configuration. DLP Policies automatically generate Edge configuration policies that align with the scope of the DLP rules. DLP policies can operate in two mode...

Copilot Wave two "Memory and Personalization" requires: Enhanced Personalization

on

New admin control: Enhanced Personalization Control

With the announcement of Copilot wave two, some may have noticed one of the new features called "Memory and Personalization". For this feature to work, copilot must learn and store some of the user's personal information. How else will it understand the user, and actually improve on the responses given over time. Some are welcoming this new feature, as competitors have already rolled out similar functionality, but others might be a bit hesitant to have this information stored.

I am guessing that is why Microsoft has introduced a new data processing control for Microsoft 365 Copilot. This control, is now called Enhanced Personalization, and is already available for Global Admins to configure for their tenants. 

What is Enhanced Personalization?

Enhanced Personalization is a forward-looking control that will become part of the default configuration for Microsoft 365 Copilot licenses. This control allows Microsoft to process user communications data, such as Teams chats and Outlook emails, to provide a more personalized experience. The goal is to enhance the baseline personalization already offered by Microsoft 365 Copilot. (Read more about it here).

The feature will be on by default.

The new control will be defaulted to "on" for Microsoft 365 Copilot licenses. This means that Microsoft will process user communications data to enhance their experience. It's important to note that this consent is fully revocable, and no features currently use this control. However, it is already now possible to configure this feature through Microsoft Graph.

Thank you for reading my post, and feel free to follow me on LinkedIn for future posts.