How to Deploy Microsoft Purview DLP for Copilot and Generative AI

Organisations adopting Microsoft 365 Copilot and generative AI are facing a common challenge. Data is no longer static. It is constantly moving, reused, and now being surfaced and generated by AI.

This changes the risk profile.

The questions I hear most often are:

  1. What are the real data security risks with AI?
  2. Which controls actually make a difference?
  3. How do we deploy them effectively in Microsoft Purview?

This guide builds on my ECS 2026 session and focuses on the controls that provide the greatest practical value. It cuts through the noise and shows how to use Microsoft Purview DLP for Copilot and generative AI, with a practical approach to reducing real-world data leakage risk across both internal and external AI tools.


Read More

Container Sensitivity Labels: The Purview “Hack” That Fixes Copilot Oversharing Fast

Introduction: Oversharing Starts Before a Single File Exists

Copilot oversharing is one of the most misunderstood risks in Microsoft 365. In reality, it often starts before a single file is uploaded.

It begins when Microsoft Teams, SharePoint sites, and Microsoft 365 Groups are created using generic tenant-wide defaults.

In an AI-enabled world, those overly permissive defaults become significantly more dangerous because Microsoft 365 Copilot operates within existing permissions.

Copilot does not create access.

It reveals it.


Read More

Why Microsoft 365 Copilot Data Readiness Matters

Microsoft 365 Copilot Data Readiness is essential for secure and effective AI adoption. Copilot is transforming the way we work by boosting productivity, creativity, and efficiency across Microsoft 365. But here is the challenge: Copilot surfaces what users already have access to. If your data governance is not in order, sensitive information could be exposed.

So, the big question is:
Is your data ready for Microsoft 365 Copilot?

I recently joined Mark Thompson from The Inform Team for a webinar on this topic. We explored how Copilot interacts with your Microsoft 365 environment, the risks of oversharing, and how to build a secure, governed foundation for responsible AI adoption.

🎥 Watch the full webinar: YouTube Recording


Read More

Mastering Records Management in Microsoft Purview: A Practical Guide for AI-Ready Governance

Microsoft Purview Records Management has become a critical priority for organizations adopting AI tools like Microsoft 365 Copilot. Because Copilot surfaces everything a user can access, including redundant, obsolete, and trivial (ROT) data, weak governance now directly translates into productivity loss, compliance risks, and potential legal exposure.

In a recent episode of All Things M365 Compliance, I joined Ryan John Murphy and Susan Lamb, Principal Data Governance SME at Infotechtion and former global records management lead at Shell, to explore how Microsoft Purview has evolved and what practical steps organizations must take to clean up their data estate.


Read More

How AI Is Reshaping Microsoft 365 Compliance: Insights from Rafah Knight

Microsoft 365 AI compliance is fast becoming a critical priority as artificial intelligence transforms how businesses operate. Tools like Microsoft 365 Copilot are reshaping productivity—but they also introduce new challenges for data governance, security, and regulatory alignment.

In a recent episode of the All Things M365 Compliance podcast, I joined Ryan John Murphy and Rafah Knight, founder of Secure AI, to explore how organisations can adopt AI responsibly within Microsoft 365. From mitigating shadow AI risks to aligning with the EU AI Act, we unpacked what legal, IT, and compliance teams need to know.

Here are the key takeaways for managing AI governance and compliance in the Microsoft 365 environment.


Read More

Measuring Copilot and Gen AI Success and Risks with Viva Insights and Purview – ECS 2025

Measure Copilot and Gen AI Success and Risks Using Viva Insights, Microsoft Purview, and the Microsoft 365 Admin Center reports

Earlier this month, I had the pleasure of speaking at the European Collaboration Summit 2025 in Düsseldorf, Germany. It was an incredible opportunity to connect with fellow Microsoft 365 professionals and explore a timely, strategic question:

How do we measure the success—and manage the risks—of Microsoft Copilot and Generative AI?

In my session, “Measuring Copilot and Gen AI Success and Risks with Viva Insights and Purview,” I shared practical, real-world strategies for going beyond basic usage statistics to understand the full picture: adoption, impact, sentiment, and security posture.


Read More

Securing Microsoft 365 Copilot: Key Insights from Workplace Ninjas Denmark

On August 9, 2024, I had the privilege of speaking about Securing Microsoft 365 Copilot at the Workplace Ninjas User Group Denmark, a community-driven event for Microsoft 365 and Microsoft Azure professionals. My session, “Deciphering Copilot: Unraveling Data Security and Governance in Microsoft 365,” explored how organizations can balance AI-driven productivity with robust security and compliance measures.

As Microsoft 365 Copilot continues to revolutionize workplaces, it’s essential for organizations to address critical security concerns. Without robust governance, businesses risk exposing sensitive information, compromising compliance, and facing potential deployment setbacks.

In this blog, I’ll share key insights from my session and outline actionable strategies to help your organization securely deploy Copilot.


Read More

Speaking at Norwegian Microsoft 365 Community |May 2024

I had the opportunity to present a session at the Norwegian Microsoft 365 Community online user group on the 24 May 2024. The Norwegian Microsoft 365 Community a group of Norwegian professionals and enthusiasts who come together to share knowledge, experiences, and best practices related to Microsoft 365.


Read More

Speaking at Commsverse 2024 | June 2024

I presented at Commsverse 2024, which took place on June 26-27, 2024 at Mercedes Benz World, UK. Commsverse is a community conference focused on Microsoft Teams and the AI-enabled workplace. The event had over 700 attendees, featured over 70 sessions across two days, and included an exhibition floor.


Read More