The News: Microsoft introduces Recall, a new feature announced as part of Copilot+ PC that aims to help users search through their PC activity, creating a wave of privacy concerns. Microsoft Support includes a guide to ensuring privacy and control over the recall experience. Find out more here.
Microsoft Recall: A Shrewd Move or Big Brother in Your PC?
Analyst Take: Microsoft’s introduction of its Recall feature, which functions by taking screenshots of the user’s screen at regular intervals to create a local, searchable record of user activity on the device, sparks a newfound debate regarding data privacy in the context of artificial intelligence (AI) apps.
Like most Copilot-like AI assistant tools, Recall can potentially enhance productivity for users by allowing them to find anything quickly, facilitating the ability to search for a specific document simply by recalling a keyword or a phrase and eliminating the time and frustration of digging through folders and file names. For more visually oriented workers, the screenshot-based approach provides further assistance by helping them to quickly locate specific tasks or projects by recalling the visuals on screen.
At the same time, however, it introduces a number of privacy and security considerations. While the data is stored locally and encrypted at rest, industry researchers are concerned about the potential for hackers to access the data on a compromised Copilot+ PC, or as a result of misuse or accidental exposure resulting from user error. Recall can be disabled but is by default enabled, likely resulting in Recall operating on a vast majority of Copilot+ PCs.
In sum, Recall, like many AI applications, is potentially a double-edged sword – a promising feature, but requires gaining of trust among users and a cautious approach when it comes to adoption. Microsoft Recall boasts undeniable potential for boosting productivity and accessibility – especially when we consider the potential for integration with Office 365. However, the privacy concerns cannot be ignored, and will require robust security measures and a commitment to user control.
Given that the Recall security and privacy controversy will not cool down anytime soon, it is possible that security concerns will tarnish or possibly slow the rollout of new Copilot+ PCs. An ongoing emphasis on clear communication and documentation of best practices for data privacy from Microsoft will be required to avoid this. To avoid this, Microsoft will need to put an ongoing emphasis on clear communication and documentation of best practices for data privacy.
It is important that businesses are aware and monitor this issue, as Recall presents data exposure and data loss risks when personal or unmanaged Copilot+ PCs are used in BYOD (bring your own device) and remote/work-at-home scenarios.
Disclosure: The Futurum Group is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.
Analysis and opinions expressed herein are specific to the analyst individually and data and other information that might have been provided for validation, not those of The Futurum Group as a whole.
Other Insights from The Futurum Group:
Security Above All Else – Six Five on the Road
Microsoft and the Future of Security – The Six Five On The Road
Microsoft Copilot for Security – Protecting at the Scale and Speed of AI – The Six Five On the Road
Image Credit: Microsoft
Author Information
Krista Case brings over 15 years of experience providing research and advisory services and creating thought leadership content. Her vantage point spans technology and vendor portfolio developments; customer buying behavior trends; and vendor ecosystems, go-to-market positioning, and business models. Her work has appeared in major publications including eWeek, TechTarget and The Register.
Mitch Ashley is VP and Practice Lead for the CIO & Technology Buyers and Software Lifecycle Engineering practices at The Futurum Group. A multi-time CIO and CTO with 30+ years leading technical organizations, Mitch built and operated production systems spanning cybersecurity for the U.S. Department of Defense, PKI services for the broadband and 5G industries, SaaS platforms, large-scale telecom and banking systems, and a national broadband network. His work with AI began early, developing expert systems that diagnosed and repaired complex mainframe environments. That operator foundation grounds his analysis in operational consequence, covering the technology buyer's world of software engineering, cybersecurity, DevOps, cloud, and AI.
