| Tool Name | Does it require personal information for signup? | Does it protect personal information? | Can it be recommended or required for use by students in your course? |
|---|---|---|---|
| Microsoft “Copilot for Organizations” accessed when logged in with UBC credentials at copilot.microsoft.com | No. Students can use it with their existing UBC credentials; this information will not be shared with the tool. | Partially. Some security and privacy protections exist. Only “Low Risk” Information should be submitted, as defined by Information Security Standard U1. | Yes, with caution: Students should log in with their UBC credentials, be reminded not to enter any personal information or intellectual property into the tool, and follow the other practices below. |
About This Tool
Microsoft’s GenerativeAI Tool Copilot for Organizations is available for UBC faculty, students, and staff from any place you would normally access Copilot, such as copilot.microsoft.com or the Microsoft Edge web browser sidebar. Once you have logged in with your UBC credentials, look for the green “Protected” label—accompanied by a shield and check-mark icon—to confirm a secure connection.
Sample Syllabus Language
Usage of Microsoft Copilot in this Course
In this course, you will use Microsoft’s generative AI tool, Copilot for Organizations, by logging in at copilot.microsoft.com using your @student.ca email address. This version prioritizes advanced privacy measures by anonymizing session data. Microsoft will cache prompts and responses temporarily in this version, ensuring that this data will not be used for AI model training.
Because Copilot’s uses global data centres there is a risk of data being shared or stored outside of Canada. To protect your data and privacy, please follow these practices:
- Sign in to Copilot using your UBC CWL Credentials. When visiting https://copilot.microsoft.com/ you will be prompted to sign in, do so using your @student.ubc.ca email address and your CWL password. Similarly, if you opt to use the Edge browser and wish to use the “Access Page Content” tool in the sidebar, use your UBC Credentials. Enable this feature only when needed and disable it immediately afterwards.
- Do not enter personal or private information, or information you do not own such as PDFs of others’ public work. Do not share any information that you would not publish on the internet. Anything you enter may be shared as results to other users.
- Avoid clicking the “Like” and “Dislike” icons to give feedback on a response. Clicking either icon risks unintentionally sharing the chat session data with Microsoft.
- Start a new topic to clear the chat history when you are done with a chat. Click the “New Topic” icon near the ‘Ask Me Anything’ box. Starting a new topic ensures that all temporarily stored prompts and responses from the current chat session are discarded from the cache.
Detailed Guidance for Microsoft Copilot for Organizations
- Always log in to Microsoft Copilot with your UBC credentials: Logging in will give you access to the “Copilot for Organizations” version. This version employs advanced privacy safeguards that anonymize any identity-related data at the start of a chat session. Microsoft will also cache prompts and responses in this version temporarily and will not use this data for any AI model training.
- Allow access to web content sparingly: In the Microsoft Edge web browser sidebar, you can activate Copilot’s “access page content” feature. With this feature activated, Copilot can access the web content that you view. This access includes not only online content but also local PDFs and other document files that you may open in Edge. Because such broad access could lead to unintended exposure of sensitive data to the tool, please enable this feature only when needed and disable it afterwards.
- What students can be instructed to share with the tool: Limit data sharing to information that is “Low Risk” according to UBC’s Information Security Standard U1.
- This information may be freely disclosed or would cause minimal harm if disclosed. Examples include names and work contact information of UBC faculty and staff members; information that is posted on a public UBC website; and research of a non-personal, non-proprietary nature.
- Instruct Students to Avoid using the feedback buttons: Once you receive a response, Copilot will show you “Like” and “Dislike” icons to give feedback on the response. Clicking either icon risks unintentionally sharing the chat session data with Microsoft. As such, it is best to avoid providing this feedback.
- Clear the chat history by starting a new topic in the tool when you are done: Starting a new topic ensures that all temporarily stored prompts and responses from the current chat session are discarded from the cache. To start a new topic, look for the icon with a plus sign over a speech bubble. You do not need to type anything into the chat box for the cache to clear.
- Remind students of the the critical limits to the tool’s responses: As with any generative AI tool, Microsoft Copilot may give inaccurate or misleading responses known as “hallucinations”. Also, Microsoft Copilot may include ads in its responses. Keep a sharp eye out for errors or questionable responses, and externally validate the accuracy of any responses that will be broadly disseminated or relied on for decision-making.
- Inform students that some of their information is shared automatically with the use of the tool: Similar to most websites, a user’s IP Address is shared with the service provider. Students can use the UBC VPN in order to help mask their IP address and location.