Microsoft 365 Copilot doesn’t hand out new permissions. It simply finds what your employees already can access within Microsoft 365: documents in OneDrive, emails in Exchange, sites in SharePoint and teams in Microsoft Teams. Unfortunately, for many organizations this contains a lot more sensitive information than expected.

That is where sensitivity labels come into play. The right labels, encryption and DLP controls, can manage which information Microsoft 365 Copilot can and cannot use in its answers. This only works if the right label ends up on the right content.

In this session, I’ll take you behind the scenes of two sensitivity label rollouts in heavy regulated sectors: health care and government. I am sharing the full journey: Gathering business requirements, running a Data Risk Check, piloting the labels, driving adoption, setting up monitoring and reporting and finishing with the implementation. I am providing you with a practical rollout approach, common pitfalls to avoid, and my lessons learned.