Microsoft Copilot is reported to allow sending data outside the EU during peak demand, which may potentially breach GDPR regulations. There are also reports of a bug that led to confidential emails being summarized, raising concerns about data privacy. Additionally, Microsoft has announced offering in-country data processing to certain countries to strengthen sovereign controls for Microsoft 365 Copilot.