EPC Group now offers a service to review Copilot and Microsoft 365 tenant security.

The Story
The company found 80% of existing M365 tenants are misconfigured, posing security risks.
Why It Matters
For European law firms, this isn't about new software; it's about securing what you already own. Microsoft 365 is your firm's data backbone. If 80% of tenants are misconfigured, your client data is exposed, and your firm is non-compliant with GDPR, let alone the EU AI Act. Using Copilot without proper security is a professional liability.
What To Do About It
Check your M365 tenant security immediately. If you have Copilot, review its data access and permissions. This is a basic cybersecurity and compliance hygiene step that can't wait.
Sources
Related Signals

HR Dive reports that cybersecurity, data privacy, and AI could leave employers legally exposed.
16 Jun 2026
JD Supra reported on a CEO's chatbot history becoming evidence at trial.
9 Jun 2026
Law360 published an article detailing three common AI adoption mistakes General Counsels should avoid.
16 May 2026