Copilot can copy sensitive files by default unless 'Copy and Extract Content' is disabled

YvesMulkers · x · 2026-10-28

Per TechTarget, Microsoft Copilot can copy highly sensitive documents by default unless admins disable the 'Copy and Extract Content' permission — a setting buried in the admin panel. Per-document protection requires applying Microsoft Purview sensitivity labels. The author argues the default should be reversed and urges enterprises to audit what Copilot can access.

Original post →

More from Safety

Safety channel →