

Microsoft's new Copilot+ Recall feature is facing backlash, labeled as a 'privacy nightmare' by users. Concerns are rising over its data handling and privacy implications.

The Copilot+ Recall feature by Microsoft captures and collects extensive personal data by taking snapshots of everything displayed on a user's screen at frequent intervals. This includes activities within applications, communications in live meetings, and websites visited for research1. The snapshots are encrypted and stored locally on the user’s PC. Recall also has the capability to search through teleconference meetings and videos watched, as it can transcribe and translate speech, thereby accessing and storing this content as well1. Additionally, Recall does not automatically exclude sensitive information such as passwords and financial account numbers from its snapshots, unless the content is protected by DRM or the user is browsing in InPrivate mode in Microsoft Edge12. This means that highly sensitive personal information can potentially be captured and stored by Recall unless explicitly excluded by the user.

The Microsoft Copilot+ Recall feature has been labeled a 'privacy nightmare' due to its ability to constantly take screenshots of a user's activity on their computer, including sensitive information such as passwords and financial data. This feature raises concerns about the security risks associated with storing such sensitive information, as well as the potential for misuse of this data. Additionally, the feature is turned on by default and requires users to manually opt-out, which could lead to uninformed users unwittingly exposing their private information.