Microsoft’s AI-Powered Screenshot Tool Faces Scrutiny Over Privacy

April 2025 Redmond, WA: Microsoft has resumed the rollout of its AI-powered screenshot tool Copilot+ Recall a controversial feature that captures snapshots of users’ screens every few seconds. Marketed as a productivity booster, the tool is drawing backlash from privacy advocates who argue it may still pose serious risks despite new safeguards.

Originally introduced in 2024, Recall was swiftly paused after being widely criticized as a "privacy nightmare." Now, Microsoft is rolling out the updated version to select users enrolled in the Windows Insider testing programme, with a global launch planned for later in 2025. However, users in the European Union will have to wait due to additional regulatory considerations.

Copilot+ Recall is designed to help users search their digital history more intuitively. Whether it's locating an email, a document, or an online shopping item like a red dress, Recall aims to let users revisit past activity with a simple search prompt. It stores regular snapshots of the screen locally, allowing users to browse their past computer activity like a time-lapse.

Microsoft says that users must opt in to activate Recall, and that snapshots are stored only on the user’s local machine. Access to these screenshots requires identity confirmation, and users can pause or delete stored images at any time. Microsoft has also stated that the tool does not operate in private or incognito browser modes, and users can choose which apps Recall monitors.

Despite these assurances, privacy campaigners such as Dr. Kris Shrishak remain skeptical. While he acknowledges the opt-in model as an improvement, Shrishak warns that consent cannot be extended to others who appear in messaging apps, emails, or private chats captured by Recall.

He pointed out the potential for sensitive information, including disappearing messages from platforms like Signal, to be stored indefinitely. Shrishak also raised concerns that if a malicious actor gains access to a device, they could exploit the visual record stored by Recall.

In response, Microsoft reiterated that Recall does not share data with the company or with third parties, and that users retain full control over what is captured and stored. The company insists that Recall is designed with privacy in mind and that each session requires verification to view stored data.

In the UK, the Information Commissioner’s Office (ICO) is closely monitoring the rollout. While the ICO does not give prior approval to products, it has emphasized the importance of transparency and responsible data use. The ICO has stated that Microsoft must ensure data is not used for purposes beyond its original collection intent, and that any failure to protect users’ rights may result in enforcement action.

As Copilot+ Recall moves from pilot testing to public release, the debate between innovation and intrusion continues to intensify. Microsoft’s challenge lies in proving that its AI tools can enhance user productivity without sacrificing digital trust or personal privacy.