Copilot DPIA

[techie17]

Is anyone using the paid version of copilot (not copilot chat)in their trust and has a DPIA they can possibly share with me so I don’t have to reinvent the wheel and save me some time? Thanks 

[psydii]

Copilot itself is covered by the same contracts as 365. So doesn’t strictly need one if you’ve got your 365 paperwork up to date. You should however add it to your AI register, and mention it alongside 365 in your RoPA.

 

But if you light up any of the integrations that alter that, such as Anthropic models, you might need to more formally consider whether an additional DPIA is needed based on the specific terms of those additional integrations.

 

in Microsoft-land if you have to click through a licence agreement to enable it, then you need to do at least a light-pass on a DPIA and add it to your RoPA and stat sharing registers.