Skip to main content

Microsoft 365 Copilot template DPIA

This template data protection impact assessment (DPIA) is for professionals in health and care organisations who are responsible for assessing the processing associated with their organisation’s use of Microsoft 365 Copilot. 

Page contents

What is Microsoft 365 Copilot

Microsoft 365 Copilot, including Copilot Chat, is a tool that uses artificial intelligence. Health and care organisations may use Copilot to help with day to day tasks.

Template DPIA

NHS England has produced a template DPIA which can be adapted locally to support good IG around the use of the paid-for enterprise model of Copilot, which integrates with Microsoft 365 apps. 

It is important to review different use cases for Copilot as the risk can vary depending on its intended use. It may be the case that you decide to have separate DPIAs for specific uses of Copilot.

Last edited: 14 May 2026 8:42 am