Skip to content
Submit incident
AII-1001-43521
ReportedReported by fewer than three independent publishers, with no official finding.Supporting sources are pending verification.

Microsoft Teams AI location tracking feature raises privacy concerns

Microsoft is introducing an AI-enabled location-tracking feature in Teams that automatically detects whether employees are in the office or working remotely by monitoring WiFi connections. The feature, scheduled for December 2025, raises privacy concerns and potential security risks, particularly given existing vulnerabilities in the platform.

27 October 2025 Β· Microsoft Β· Privacy and surveillance
27 October 2025
AII-1001-43521
Quick facts
Category
Privacy and surveillance
Country
United States
Date
27 October 2025
Drafted by
Raidu Incident Detection

What happened

Microsoft has announced a new feature for Teams that will automatically detect and display employees' real-time location in the office based on WiFi connections. When users connect their devices to the enterprise WiFi network, Teams will automatically update their work location according to the building they are in.

The feature is scheduled for December 2025 and will initially be disabled by default. Local administrators will need to manually enable it and obtain user consent before it becomes active.

Reported impact

The feature raises privacy concerns as it enables real-time location sharing with employee teams. Critics note it poses a serious privacy intrusion and potential danger by revealing user location data, particularly concerning given existing security vulnerabilities in Microsoft Teams.

Index analysis

The feature is designed to improve productivity and facilitate team communication by clarifying where colleagues are located. However, security researchers warn that existing authentication token vulnerabilities in Microsoft Teams on Windows could potentially be exploited to extract the geolocation data of users.

Governance controls

Microsoft states the feature does not constitute employee surveillance. The feature will be disabled by default, with local administrators required to manually enable it and obtain user consent before activation.

Classification

Category
Privacy and surveillance
Industry
Business processes and support services
Country
United States
Harm status
Potential harm
Intent
Unintentional
Timing
Unknown
Harm types
Reputational
Harmed
Workers
AI systems
Microsoft Teams

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident