Work data protections and admin controls

When you finish, you can explain in plain words what work data protections mean and what your admin decides.

What work data protection means

Microsoft describes protections for organizations that use Copilot with work accounts. In general terms, this means the tool is meant to follow your organization's existing permissions and security settings, and your organization's content is handled under business terms. The exact promises are in Microsoft's current documents and your organization's agreement, so read those, not a summary from a stranger.

Protection is not the same as permission to paste anything. It does not replace your employer's policy, your professional rules, or your own judgment. Treat it as a safer container, not a free pass.

Permissions still matter

Work Copilot can usually only draw on things you already have access to. That is helpful, but it can reveal a problem: if files are shared too widely, Copilot may surface them to people who should not see them. Good file sharing habits matter more, not less.

If you notice you can see a document you should not, tell your IT or security team. Do not use it. Reporting a sharing mistake is a good deed.

What admins control

Administrators decide who has Copilot, which apps include it, whether certain features such as meeting transcription or web search are on, and what data sources can be used. That is why your colleague may have a feature you do not. Ask your admin before you assume something is missing or broken.

Worked example: Maria in Chile asks why Copilot in Teams cannot recap a meeting. Her admin explains that transcription was not enabled for that meeting type. The team agrees on a rule for when to record, and tells attendees. The fix was a policy choice, not a bug.

Your own habits at work

Follow your organization's AI policy. Use the approved tool for work data. Label AI-assisted work if your organization asks. Keep a record of what sources you used for important documents. If you are asked to use AI in a way that seems wrong, such as to make a decision about a person without review, speak up.

A person must remain accountable for decisions about hiring, grades, health, benefits, pay and legal matters. Copilot can help prepare, but it should not be the decision-maker.

Practice now

Find your organization's AI or acceptable-use policy and write three rules from it in your own words. If none exists, write three questions to ask IT.
Write a short note you could send to IT asking which Copilot features you may use and for what kinds of data.

Use any AI assistant you have. Do not paste private, client or patient information into it.

Check yourself

1. What does work data protection not replace?

2. Who decides which Copilot features are on at work?

3. If Copilot shows you a file you should not see, you should

Ask the AI tutor

Ask anything about this lesson, in any language. The tutor is an AI: it can be wrong, and it never needs your personal details.

Next lesson: Checking output and building good habits

AI-drafted. Checked by an automated validator and a separate AI reviewer; a person has not read every lesson. Translations and tutor answers are AI-made. Found a mistake? Tell us. AI can be wrong. General information only, not professional advice. Not affiliated with any AI company named. Current University is not accredited.