Copilot shows what people can already open.
Copilot respects permissions, so too much access means too much in the answers. We follow the objective Prevent oversharing of sensitive data from trends and risk patterns to a remediation plan with five actions. The default data risk assessment covers the 100 most used SharePoint sites every week, and item-level scanning lets you fix single items right in DSPM. A label alone doesn't stop Copilot. Encryption or a DLP policy for Copilot does.