Microsoft is relaunching Copilot's "Recall" feature on its upcoming Copilot+ PCs with security enhancements after the company "listened to feedback" about the product's initial privacy concerns.
Recall initially drew criticism when it was unveiled in May after Microsoft illustrated that the process stores a screenshot of what a user does every few seconds and stores it in a file on the device. Recall could scroll through this user's activity, encompassing their files, photos, emails and browsing history. Users could visit this repository to retrace their steps, similar to how they can go back through their web browser history, to help them locate previously viewed or worked-on items.
Microsoft says it has taken on board feedback about the tool as a potential "privacy nightmare", as described by Dr Kris Shrishak, an adviser on AI and privacy. Having removed several contentious features, including Recall as an opt-in capability rather than enabled by default, Microsoft plans to relaunch Recall on Copillot+ PCs in November.
What Happened Back In May?
When Recall was presented in great detail during Spring's Microsoft Rebuild, the tech giant pre-empted privacy concerns surrounding the solution, stating that screenshots captured by the tool remained on the user's computer and were inaccessible to Microsoft. The company also said in the FAQ section that Recall would not filter or censor sensitive information, such as passwords and bank details.
Despite Microsoft's anticipatory attempts to calm the storm, the tool inevitably prompted myriad concerns. Critics highlighted the potential risks posed by harvesting such significant quantities of sensitive data, including making users' data a target for hackers or misuse by domestic abusers.
In response to the growing scrutiny, the UK's Information Commissioner's Office (ICO) confirmed that it was in discussions with Microsoft to understand better the privacy protections built into Recall.
The ICO emphasised the importance of transparency in data usage, stating on its website, “We expect organisations to be transparent with users about how their data is being used and only process personal data to the extent that it is necessary to achieve a specific purpose.”
The ICO added that companies should consider data protection from the outset, rigorously assessing and mitigating risks to users' rights and freedoms before launching new products. It confirmed it was making inquiries with Microsoft to ensure adequate privacy safeguards were in place.
Although Recall was intended to be included with Copilot PCs when the first iterations arrived in June, it was never made generally available. Microsoft explained the delay as their intention to make the service more secure.
How Has Recall Changed To Be More Secure And Compliant?
Microsoft has introduced several significant security enhancements that assuaged many, if not quite all, of the privacy fears Recall initially triggered.
