My uncle runs IT for a big legal firm and this is such a headache for them. Lawyers are suddenly having confidential client data scraped automatically by windows to train their AI.
The IT team won't even be notified about it until someone asks if they can use the AI option in Notepad or Outlook or something then they have to go and manually block the connections across the whole network.
This is gonna be such a privacy and legal clusterfuck once someone figures out how to extract this training data