GenAI Co-pilot -- Privacy and Compliance Issues with Copilot Bot (contact card)

Related products:AI Assistant

Forum|Forum|2 years ago
May 17, 2024
5 replies
70 views

I am writing to address some privacy and compliance concerns related to the new Copilot bot, particularly concerning how it handles PII.

In the classic version of our contact card, sensitive details such as worker type and hire date are not displayed to uphold our privacy standards.

However, the new Copilot bot has been displaying these details and omitting less sensitive information like contact phone numbers. This inconsistency poses a risk to our compliance with internal privacy standards.

I recommend implementing filters within the bot’s intent flow to ensure that it excludes fields that should not be disclosed and includes those that should. This adjustment will help align the bot's outputs with our privacy and compliance requirements.

Next Gen AI Assistant

rraj

Community Manager

Hi @priya.kornalius . We plan to update the people lookup response to have a structured card instead of just a paragraph summary in the next couple of weeks. Initially, this will be a standard format for all customers, which will exclude all fields that customers have called out as being sensitive, including worker type and start dates.

Thanks,

Ritwik

dluckadoo

Employee

1. New→4. Future Consideration

Dray

priya.kornaliusAuthor

Known Participant

Hi @priya.kornalius . We plan to update the people lookup response to have a structured card instead of just a paragraph summary in the next couple of weeks. Initially, this will be a standard format for all customers, which will exclude all fields that customers have called out as being sensitive, including worker type and start dates.

Thanks,

Ritwik

Thanks @rraj !

PriyaK

DIANA.TWC

Inspiring

Hi @priya.kornalius - are these data fields stored in your AD or an external app? I’m seeking to understand what type of access your bot has and how its pulling this information.

priya.kornaliusAuthor

Known Participant

Hi @priya.kornalius - are these data fields stored in your AD or an external app? I’m seeking to understand what type of access your bot has and how its pulling this information.

User details data is coming from our AD.

PriyaK

Sign up

If you're a Moveworks customer, you can click the SSO button below to login-even if it's your first time. Everyone else can use email or click create an account above to register.

Login or create an account

If you're a Moveworks customer, you can click the SSO button below to login-even if it's your first time. Everyone else can use email or click create an account above to register.