Microsoft Copilot+ Recall feature 'privacy nightmare'

microsoft-copilot+-recall-feature-'privacy-nightmare'
Microsoft Copilot+ Recall feature 'privacy nightmare'

The Information Commissioner’s Office (ICO), the UK’s data regulator, is investigating a feature developed by Microsoft called Recall. The system allows the collection of encrypted snapshots of a computer screen stored locally on a device, and quick searches of past activity, including files, photos, emails and browsing history. Microsoft states that the feature is designed for its new Copilot+ computers only and is optional. However, privacy advocates are concerned that it may be used to create a potential “privacy nightmare.”
 
The ICO has said that it is contacting Microsoft for more detailed information on the product’s safety, and the company has outlined on its website that the user controls what is captured. For example, users can opt out of capturing certain websites, and private browsing on Microsoft’s own Edge browser will not be captured. Microsoft also said that Recall data is only stored locally and isn’t accessed by people without device access, and a potential hacker would need to unlock the user’s device to access stored screenshots.
 
However, adviser on AI and privacy, Dr Kris Shrishak, has voiced fears for what he calls the “chilling effect” on people, explaining that people may avoid certain websites and avoid accessing confidential documents when it can take screenshots every few seconds. Meanwhile, Jen Caltrider, who leads a privacy team at Mozilla, has highlighted that the plans mean someone who knows an individual’s password could now access their history in more detail and, according to Microsoft, Recall will not moderate or remove information from screenshots that contain a password or financial account details.
 
Data and privacy expert Daniel Tozer at Keystone Law has stated that issues surrounding lawful basis to record personal information for some people on a screen on a video call or photo ethics around giving consent to this type of monitoring will need to be addressed, alongside access controls and how consent screening may work in practice

Read the full article from The BBC here: Read More