Update DPIA Microsoft 365 Copilot

26 June 2025 - Microsoft recently provided us with new information on how they plan to implement mitigating measures. This information is now being analysed by us and reported back to Microsoft. We see that the trajectory is going in the right direction. Proper steps are being taken by Microsoft. At the moment, we just cannot comment on the exact content.

17 April 2025 - We are in bi-weekly contact with Microsoft about the measures to be taken to mitigate the risks identified from the DPIA on Microsoft 365 Copilot. Microsoft demonstrates their cooperation in providing information on the possible improvements.

The information we received from Microsoft on 4 April was analysed. We have shared our findings on this with Microsoft. For now, our advice on the use of Microsoft 365 Copilot remains unchanged. For the substantiation, please refer to the DPIA from December 2024: SURF advises against using Microsoft 365 Copilot for the time being due to privacy risks: SURF advises not to use Microsoft 365 Copilot for the time being due to privacy risks.

Questions? 

Do you have further questions? If so, please contact us at vendorcompliance@surf.nl.