Microsoft has initiated the rollout of its latest AI-driven tool, Copilot+ Recall, designed to capture snapshots of users’ screens at regular intervals. Currently available in preview mode, this feature is accessible to select users of Microsoft’s AI-enabled PCs and laptops, marking a revival of a previously controversial tool that faced significant backlash upon its initial announcement last year.
The rollout was temporarily halted in 2024, allowing Microsoft to refine the technology through trials with a limited user base. Now, the company is expanding access to participants in its Windows Insider software testing program. While Microsoft plans to make Recall available globally, users in the European Union will experience a delay, with access expected to commence later in 2025.
Functionality and User Control
Recall aims to enhance user experience by enabling easy searches through past activities, including files, photos, emails, and browsing history. For instance, if a user recently spotted a dress online, they could effortlessly retrieve the information using this feature.
Users will have the option to opt-in to Recall, with Microsoft assuring them that they can pause the saving of snapshots at any time. However, privacy advocates, including Dr. Kris Shrishak, have expressed concerns regarding the potential misuse of the feature. Dr. Shrishak, who previously labeled Recall a “privacy nightmare,” acknowledged the improvement of the opt-in mechanism but cautioned that it could still capture information about individuals who have not consented.
Recall’s capabilities extend to saving images from emails and messaging applications like WhatsApp, which means that private messages and images from other users may also be stored. Dr. Shrishak highlighted the implications of this functionality, comparing it to the permanence of screenshots taken by users themselves. He raised alarms about the risks posed by malicious actors who could exploit saved images if they gained unauthorized access to a device.
In response to privacy concerns, Microsoft has stated that Recall does not share snapshots or associated data with the company or third parties, ensuring that information remains isolated among individual users. The company emphasized that users must confirm their identity before accessing their snapshots, and all images captured by Recall are stored locally on the user’s device.
Moreover, users have the flexibility to select which applications can utilize the feature, and private browsing modes in certain browsers will not be subject to snapshotting. Users also retain the ability to delete any screenshots that have been captured.
The UK’s Information Commissioner’s Office (ICO) has been actively engaging with Microsoft regarding these developments. The ICO has expressed its expectations for improved user transparency and the assurance that personal data will not be repurposed beyond its original intent. While the ICO does not pre-approve products or services, it holds organizations accountable for demonstrating compliance with data protection laws and is prepared to take action should they fail to uphold individuals’ data protection rights.
