{"id":979641,"date":"2021-12-17T17:09:02","date_gmt":"2021-12-17T16:09:02","guid":{"rendered":"https:\/\/pulse.microsoft.com\/?p=979641"},"modified":"2025-04-18T10:50:07","modified_gmt":"2025-04-18T09:50:07","slug":"fa2-979641","status":"publish","type":"post","link":"https:\/\/pulse.microsoft.com\/nl-be\/work-productivity-nl-be\/na\/fa2-979641\/","title":{"rendered":"Microsoft commitments to M365 Copilot DPIA"},"content":{"rendered":"<p>Dear SLM<\/p>\n<p>Thank you for the ongoing dialogue with SLM. This letter sets out Microsoft\u2019s commitment to<br \/>\nSLM regarding the key open concerns related to the M365 Copilot DPIA. Microsoft is<br \/>\ncommitted to ongoing work between the parties to resolve concerns SLM has raised regarding<br \/>\nthe Dutch government\u2019s intended use of M365 Copilot and to enable SLM to advise positively to<br \/>\nits constituents concerning the adoption of M365 Copilot.<\/p>\n<p>In consideration of these commitments, we understand that SLM will partner with Microsoft to<br \/>\nresolve these concerns over the coming months as outlined below and your DPIA for M365<br \/>\nCopilot will be amended by SLM to reflect that these concerns have been addressed.<\/p>\n<p><strong>Retention Timeline<\/strong><\/p>\n<p>By 4 April 2025, Microsoft commits to implement a policy across M365 applications and Copilot<br \/>\nto retain Personal Data included in service-related data used for diagnostic purposes for no<br \/>\nlonger than eighteen (18) months with the exception of data retained for security or reasonably<br \/>\nrequired for other legitimate legal purposes (e.g., legal holds).<\/p>\n<p><strong>DSAR<\/strong><\/p>\n<p>By 4 April 2025, Microsoft commits to work with SLM to better understand SLM\u2019s Data Subject<br \/>\nAccess Request (DSAR) output use case scenario to evaluate options to help the DSAR format<br \/>\nbetter work for SLM and provide a reading guide generally applicable to DSAR outputs.<\/p>\n<p><strong>RSD and Diagnostic Data Transparency<\/strong><\/p>\n<p>We understand that the Required Service Data (RSD) concept has continued to cause confusion<br \/>\nfor SLM and we are working to evolve our documentation to provide greater clarity and<br \/>\ntransparency. By 4 April 2025, Microsoft commits to provide additional transparency to SLM with<br \/>\nmore detailed categories of the types of service-related data processed through use of Microsoft 365 Copilot and existing controls for these types of data, their purpose, and typical<br \/>\nretention timelines.<\/p>\n<p><strong>Accuracy of Personal Data in Copilot Outputs<\/strong><\/p>\n<p>By 4 April 2025, Microsoft commits to discuss with SLM an approach to supporting an industry wide RAI standard as well as to investigate options to help enable data controllers to assess the<br \/>\nimpact of RAI mechanisms on Personal Data and evaluate the output of Microsoft 365 Copilot<br \/>\naccuracy concerning Personal Data themselves.<\/p>\n<p>Relative to asks for specific data re: accuracy of personal data in Microsoft 365 Copilot output,<br \/>\nby 4 April 2025, Microsoft commits to provide insights into the privacy principle within its<br \/>\nResponsible AI practices and will work with SLM to further define the level of detail.<\/p>\n<p><strong>Next Steps<\/strong><\/p>\n<p>Microsoft proposes that the parties meet on a regular cadence between now and 4 April 2025 to<br \/>\nensure feedback and progress in resolving the concerns. On behalf of Microsoft, I want to again<br \/>\nthank you for your ongoing collaboration, and we look forward to making continued progress<br \/>\non these concerns to assist the Dutch government in its deployment of M365 Copilot.<\/p>\n<p>Sincerely,<\/p>\n<p>Ale\u0161 Hole\u010dek<br \/>\nChief Technology Officer<br \/>\nExperiences and Devices<br \/>\nMicrosoft Corporation<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dear SLM Thank you for the ongoing dialogue with SLM. This letter sets out Microsoft\u2019s commitment to SLM regarding the key open concerns related to the M365 Copilot DPIA. Microsoft is committed to ongoing work between the parties to resolve concerns SLM has raised regarding the Dutch government\u2019s intended use of M365 Copilot and to [&hellip;]<\/p>\n","protected":false},"author":449,"featured_media":979642,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"class_list":["post-979641","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-none-en-ie","specials-work-productivity-nl-be","stories-managing-your-data-nl-be","stories-hoe-kan-ik-veilig-gegevens-beheren","businessPriorities-data-ai-nl-be"],"_links":{"self":[{"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/posts\/979641"}],"collection":[{"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/users\/449"}],"replies":[{"embeddable":true,"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/comments?post=979641"}],"version-history":[{"count":6,"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/posts\/979641\/revisions"}],"predecessor-version":[{"id":1034508,"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/posts\/979641\/revisions\/1034508"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/media\/979642"}],"wp:attachment":[{"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/media?parent=979641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pulse.microsoft.com\/nl-be\/wp-json\/wp\/v2\/categories?post=979641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}