Microsoft recently introduced AI-enabled PCs and new AI services powered by its Copilot assistant ahead of its annual developer conference, Build. One of the standout features, Recall, has raised concerns and is now under possible investigation by the UK’s data watchdog.
Recall is designed to assist laptop users in easily identifying websites and documents they have previously accessed by taking screenshots every few seconds. While Microsoft emphasized that the feature is optional, the Information Commissioner’s Office (ICO) reached out to inquire about how Recall functions and how stored screenshots will be handled.
According to an ICO spokesperson, organizations are expected to be transparent about user data usage and only process personal data as needed for a specific purpose. They stressed the importance of prioritizing data protection and evaluating risks to users’ rights before introducing products to the market.
On Microsoft’s website, they detailed the security measures in place for Recall, including user control over limiting or deleting screenshots and the exclusion of content viewed in Microsoft Edge InPrivate browsers and protected by digital rights management from being captured. Microsoft assured that the encrypted screenshot data cannot be accessed by the company, nor does it moderate captured content to remove sensitive information like passwords.
However, privacy advocates like David Ruiz from Malwarebytes expressed concerns about the potential security risks Recall poses to users. He highlighted how despite encryption, sensitive information from Recall could still be accessed by others using the same device, increasing the risk of data breaches and privacy violations.
Experts like Roger Grimes from KnowBe4 emphasized that attackers would need access to a user’s laptop to exploit Recall screenshots, opening the door to various malicious activities. Threat intelligence analyst Aaron Walton from Expel questioned the added value of Recall in the face of existing privacy threats and the potential for further data breaches.
Looking at the broader cybersecurity landscape, research firm GlobalData projects significant growth in the cybersecurity market, expecting it to exceed $290 billion by 2027 with a 13% CAGR from 2022. Microsoft’s partners like Dell and Lenovo are set to offer Copilot features on laptops, enhancing imaging capabilities and document summarization.
As concerns around data protection and privacy continue to evolve, the implications of features like Recall on user security remain a topic of debate and scrutiny. With the cybersecurity market poised for substantial growth, balancing innovation with safeguarding user data will be crucial for technology companies moving forward.
Article Source
https://finance.yahoo.com/news/explainer-does-microsoft-recall-pose-083608787.html
