Microsoft Copilot (consumer health) CAIHL draft report

Microsoft Copilot (consumer health): CAIHL reassessment

September 8, 2026. Published AI-assisted draft.

This assessment covers the dedicated Copilot Health preview. Its documented Health-space protections, citations, and connection controls must be distinguished from general Copilot health conversations. Preview access and subscription conditions remain relevant.

Scope and agency posture

Dedicated Copilot Health preview, with general Copilot health answers identified separately. Health-space protections must not be attributed to every health conversation in general Copilot.

Posture: Potentially agency-expanding, subscription-gated preview.

Axis: 71/100, retained provisionally. No numerical recalibration was performed.

Sources and documented findings

• The May preview post documents user health goals, optional records and wearables, provider search, Microsoft 365 subscription eligibility, isolated Health conversations and no AI training. These remain vendor commitments. https://www.microsoft.com/en-us/microsoft-copilot/blog/2026/05/29/copilot-health-now-in-preview/

• The launch page describes citations and Harvard Health answer cards. ISO/IEC 42001 concerns management processes, not independent verification of answer quality or every privacy control. https://microsoft.ai/news/introducing-copilot-health/

• The July consumer health privacy notice covers multiple Microsoft services and describes product-dependent uses, sharing and rights. Its general advertising provisions do not establish advertising use of dedicated Copilot Health data. https://www.microsoft.com/en-us/privacy/microsoft-consumer-health-data-privacy-policy

Patient authority

Inference from the documented workflow: Patients bring goals and questions, select connections and can disconnect them. The dedicated space provides meaningful direction, although recommendation and source-selection design remain vendor controlled.

Critical capacity

Editorial assessment: Citations and navigation support independent checking and action. Public evidence does not establish a patient workflow to correct generated insights or propagate corrections to source records.

Informed control

Editorial assessment: Distinguishing the protected Health space from general Copilot is essential. Privacy and certification claims need their proper scope. Patient-organization input is evidence of consultation, not patient governance.

Assessment and limits

The baseline combines two deployments with different conditions. Its positive but qualified placement remains defensible for the dedicated space. Price is an access limitation, not evidence that patient goals are overridden.

Confidence: Moderate for documented preview design.

Remaining uncertainty: Current in-account availability, connector retention and correction behavior were not tested

Published documentation is evidence of stated conditions, not proof of actual implementation. Unknowns did not receive automatic negative points. Funding, sponsorship, and public code do not determine agency by themselves.

Review provenance

• Reviewer/model: OpenAI Codex / GPT-6.
• Method: Focused public-source reassessment using CAIHL: patient authority, critical capacity, and informed control. Existing evidence plus one focused primary-source pass and at most one targeted follow-up. No live product testing. Numerical scores remain provisional editorial placements, not a new calculation.
• Human review: Hugo Campos authorized publication of these AI-assisted draft reassessments on September 8, 2026. This does not claim comprehensive human verification of every finding.
• Earlier review: 2026-06-10. Historical assessment. Earlier claims are not automatically reverified by this publication.