Merge pull request #29303 from MicrosoftDocs/danbrown-copilot-privacy-compliance

Update compliance section of Microsoft 365 Copilot privacy article

Author: DHB-MSFT

copilot/microsoft-365-copilot-privacy.md

@@ -16,7 +16,7 @@ ms.collection:
 - trust-pod
 hideEdit: true
 ms.update-cycle: 180-days
-ms.date: 08/15/2025
+ms.date: 08/22/2025
 ms.custom: [copilot-learning-hub]
 ---
 
@@ -132,11 +132,13 @@ We already implement multiple forms of protection to help prevent customers from
 
 ## Meeting regulatory compliance requirements
 
-As regulation in the AI space evolves, Microsoft will continue to adapt and respond to fulfill future regulatory requirements.
+Microsoft continues to adapt and respond to fulfill AI regulatory requirements as they evolve, so we earn and keep the trust of customers, partners, and regulators.
 
-Microsoft 365 Copilot is built on top of Microsoft’s current commitments to data security and privacy in the enterprise. There's no change to these commitments. Microsoft 365 Copilot is integrated into Microsoft 365 and adheres to all existing privacy, security, and compliance commitments to Microsoft 365 commercial customers. For more information, see [Microsoft Compliance](/compliance).
+Microsoft 365 Copilot provides broad compliance offerings and certifications, including [GDPR](/compliance/regulatory/gdpr), [ISO 27001](/compliance/regulatory/offering-iso-27001), [HIPAA](/compliance/regulatory/offering-hipaa-hitech), and the [ISO 42001 standard for AI management systems](/compliance/regulatory/offering-iso-42001). These help support our customers on their compliance journeys, complemented by features such as contractual readiness, built-in information and communication technology risk management, and operational resilience tooling.
 
-Beyond adhering to regulations, we prioritize an open dialogue with our customers, partners, and regulatory authorities to better understand and address concerns, thereby fostering an environment of trust and cooperation. We acknowledge that privacy, security, and transparency aren't just features, but prerequisites in the AI-driven landscape at Microsoft.
+Microsoft is committed to complying with all laws and regulations applicable to Microsoft, including the EU AI Act, to enable our AI solutions to meet evolving standards for trustworthy and responsible AI. Microsoft 365 Copilot is built on top of [Microsoft’s existing commitments to data security and privacy](https://www.microsoft.com/trust-center/privacy). There is no change to these commitments. Copilot is integrated into Microsoft 365 and adheres to existing privacy, security, and compliance commitments to Microsoft 365 customers.
+
+Additionally, we prioritize open dialogue with our partners and regulatory authorities. We provide customers with direct access to Microsoft compliance professionals, proactive guidance, and curated solutions to help navigate regulatory compliance, such as the [Microsoft 365 Copilot & Copilot Chat Risk Assessment Quickstart](https://servicetrust.microsoft.com/DocumentPage/4fe5df86-848b-4097-b3fa-4625e2b8e8f2). Our approach in the AI-driven landscape aims to empower organizations to innovate confidently with solutions built with transparency, privacy, and security in mind.
 
 ## Additional information