Microsoft will offer free Enterprise Data Protection (EDP) to Entra users and an ad-free Copilot Experience

Microsoft is now offering free enterprise data protection for users of Microsoft Copilot with Microsoft Entra accounts. This move, announced in August 2024, is a testament to Microsoft’s commitment to safeguarding user data across its platforms.

Microsoft’s Enterprise Data Protection (EDP) isn’t a new concept; it’s been around, providing businesses of all sizes with the tools to protect their data within the Microsoft 365 ecosystem. The free expansion of EDP to Microsoft Copilot users means that the prompts you enter and the responses generated by Copilot are shielded under the same robust contractual terms and commitments that Microsoft applies to other services like Outlook and SharePoint.

With this update, Microsoft ensures data encryption at rest and in transit, alongside stringent physical security controls and data isolation between tenants. Plus, with support for GDPR and ISO/IEC 27018, Microsoft’s commitment to privacy is straightforward and robust.

But it’s not just about keeping data locked up. The access controls and policies you’ve set up apply to Copilot, too. Your identity model, permissions, sensitivity labels, and retention policies extend to how Copilot interacts with your data.

With EDP in Microsoft Copilot:  

• We secure your data: We help protect your data with encryption, at rest and in transit, rigorous physical security controls, and data isolation between tenants.  
• Your data is private: We won’t use your data except as you instruct. Our commitments to privacy include support for GDPR, ISO/IEC 27018 [4], and the Data Protection Addendum.
• Your access controls and policies apply to Copilot [5]: Prompts and responses are logged, retained, and available for audit, eDiscovery, and advanced Microsoft Purview capabilities. The specific controls will vary depending on the underlying subscription plan. 
• You are protected against AI security risks: We help safeguard against AI-focused risks such as harmful content and prompt injections.   
• Your data isn’t used to train foundation models: Prompts and responses are not used to train foundation models.  

One aspect that particularly stands out is the protection against AI security risks. In an era where AI is both a powerful tool and a potential threat, Microsoft’s proactive measures to safeguard against harmful content and prompt injections are commendable. And for those concerned about their data being used to train AI models, Microsoft clarifies that Copilot uses the user’s context to create relevant responses without feeding your data into foundation models.

In addition to enhancing data protection, Microsoft is also rolling out a simplified, ad-free Copilot experience focused on work and education customers. This streamlined interface, set to launch in mid-September, promises to make it easier for users to leverage Copilot’s capabilities without the clutter of ads and irrelevant features.

It is recommended that IT admins enable in-app access to Microsoft Copilot by pinning it. This step ensures that users across the organization benefit from the enhanced security and user experience updates. Microsoft has also prepared an FAQ page for those looking to dive deeper into these updates, providing a valuable resource for admins and users alike.

Microsoft’s latest updates to Copilot, including the extension of Enterprise Data Protection and the introduction of a simplified user interface, mark a significant stride in data security and user experience. Whether you’re an IT professional managing an organization’s data protection strategy or a user relying on Microsoft’s suite of services for productivity, these updates offer peace of mind and a more focused, secure way to leverage AI-driven assistance.

In other news, the Redmond-based tech giant will introduce prompt suggestions to Microsoft Copilot to encourage users to interact with the AI model more.