@kennethta Anything you can access can be seen by Copilot. This also means that if something was overshared then it can be seen. If you have a person that accidentally shared a salary file with everyone via on-drive and another person is working a salary file then it could pull that data. This has far reaching issues and I would hope that a "dashboard" could be created to help find overshared documents.
If you are able to define DLPs that would catch these for instance, don't let A group have any access to file from B group no mater if they are shared with them. This would include the ability to not allow access to any file with a Sensitivity label of C.
