Menin questions Milstein on confidential city data and Copilot
Menin asks what prevents city employees from entering confidential data into AI systems like Copilot. Milstein says the Microsoft contract prevents training on city data and that data is HIPAA and criminal-justice compliant and securely hosted.
So what safeguards are currently in place to prevent city employees from entering
confidential private city data, whether authorized or unauthorized, into AI systems such as Copilot that are being controlled by outside corporations?
Thank you for the question.
Our contract with Microsoft, which runs Copilot Chat, prevents them from using city worker data to train their models.
The way they host data for us also ensures that we're HIPAA compliant.
CRI-S compliant, that the data is kept carefully and securely, that there isn't risk of the data being leaked either to Microsoft or to the public.
So you can confidently say that no private or confidential city data has ever been obtained by an AI company and then used to train an AI model?
Thank you for the question.
I'm confident that our agreements with Microsoft prevent them from taking such actions.
And does OTI currently measure the impact that AI tools are having on the city's workforce?
Yeah, thank you for the question.
Per local law 25,
of December 2025, we are engaged in a workforce study to understand the impact of algorithmic tools on city workers and automated employment decision tools.
And we will be having, we will have results from that to share next year.