top of page

Exclude content from M365 Copilot 🤖

Writer's picture: Bjørnar AassveenBjørnar Aassveen

As announced at Ignite in November 2024, now available (still in preview) is the ability to exclude content from M365 Copilot with DLP rules. With DLP for M365 Copilot, you can now create DLP policies to exclude documents with specified sensitivity labels from being summarized or used in responses in M365 Copilot Business Chat. (Copilot chat).


I've been testing this for a while in the demo tenant now, here's a little guide on setup.📖

Create a sensitivity label or use one you already created. I chose to create my own for testing purposes.


Remember to add the label to a label policy or create a new one and publish it to the test group.




Create a DLP rule

Select "Microsoft 365 Copilot (Preview)"


Set conditions and actions for the rule, in my case I set that all data marked with the label "Copilot - Exclude" (which we created in the first step) will be excluded from Microsoft 365 Copilot. Important to note: Currently, this action is supported only for labeled files in SharePoint and OneDrive that are processed for chat experiences in Microsoft 365 Copilot. It's not supported when processing labeled files in non-chat Copilot experiences. (In short, it means that inside the office applications it will not work with blocking at the moment.)


In summary, the DLP rule looks like this:


Test the rule


I then create a document in my OneDrive that I label with the sensitivity label "Copilot - Exclude"


When I then go into Copilot chat and query the document, I get a message that Copilot does not have access.


But as mentioned above, it is not yet supported in the office applications, as shown below it looks like Microsoft is about to change this as Copilot in Word gives me somewhat ambiguous answers as to whether it can actually summarize the document or not.. 🫤🤨



In summary, this is the start of something good. It still requires that you have good control over internal data, but opens up the possibility of excluding certain types of data for Copilot. A very good measure for example in a DPIA and/or risk and vulnerability analysis.

Bjørnar&AI

0 comments

Recent Posts

See All

Comments


bottom of page