---
title: "Total Recall - Copilot+ PC feature Recall"
url: "https://www.dariuszparys.com/total-recall-copilot-pc-feature-recall"
author: "Dariusz Parys"
published: 2024-05-23T13:56:00.000Z
updated: 2025-03-26T15:09:12.000Z
description: "Microsoft's \"Recall\" feature on new Surface PCs aims to enhance memory by capturing screen snapshots. This raises questions about data privacy and access, especially in shared environments."
tags:
  - "Privacy"
  - "Windows"
---

# Total Recall - Copilot+ PC feature Recall

Earlier this week, Microsoft unveiled its new PC lineup, featuring the Surface
Laptop 7 and Surface Pro 11. A key highlight is the inclusion of dedicated NPUs
(Neural Processing Units), enabling these devices to efficiently run SLMs (Small
Language Models) and other AI models locally. Microsoft has dubbed this
generation "Copilot+ PCs."

## Microsoft Unveils New Surface Laptop 7 & Pro 11 with "Recall"

One feature that didn't initially catch my attention during the announcement is
called "Recall." While initially intriguing in its potential to aid memory
recall, this feature has sparked significant privacy concerns. I stumbled upon a
YouTube video that vividly expressed these concerns.

## "Recall" – What Is It and How Does It Work?

::youtube{src="https://www.youtube.com/embed/AKecRAZLDvU?si=r07OLdrWfaoSRyNM"}

The video creator rightly points out the unsettling aspect of capturing and storing your screen every few seconds, a practice that could potentially infringe on your privacy.

## The Privacy Concerns Surrounding "Recall"

Of course, I don't know precisely how "Recall" is implemented or where the data in the filesystem is stored. However, in enterprise environments, it's common for employee data to be stored on network storage or OneDrive for Business. Making it in theory accessible to other persons.

According to the [Copilot+ PC features](https://www.microsoft.com/en-us/windows/copilot-plus-pcs?r=1#faq2), additional data encryption is in place, but it doesn't describe whether the user can choose or influence this encryption.

You can have a detailed explanation of the recall feature through the Microsoft support site

::bookmark{icon="https://www.dariuszparys.com/content/images/icon/apple-touch-icon-2.png" image="https://www.dariuszparys.com/content/images/thumbnail/total-recall-copilot-pc.webp" site="Microsoft Support" title="Retrace your steps with Recall - Microsoft Support" url="https://support.microsoft.com/en-us/windows/retrace-your-steps-with-recall-aa03f8a0-a78b-4b3e-b0a1-2eb8ac48701c"}

also there is meanwhile an article explaining the architecture of recall

::bookmark{description="Overview\nAs AI becomes more integral to Windows, Microsoft is doing more with AI on the edge with the power of a 40+ TOPS Neural Processing Unit on Copilot+ PCs. This enables lower latency, better battery life for AI intense tasks, use of AI" icon="https://www.dariuszparys.com/content/images/icon/cropped-browser-icon-logo-270x270.jpg" image="https://www.dariuszparys.com/content/images/thumbnail/hero.jpg" publisher="Windows Experience Blog" site="Windows Experience Blog" title="Update on Recall security and privacy architecture" url="https://blogs.windows.com/windowsexperience/2024/09/27/update-on-recall-security-and-privacy-architecture/"}

As I revised this post, I still have this point that is not addressed or at least I haven't found it.

:::callout{emoji="❗" tone="yellow"}
Bitlocker Recovery Keys are usually accessible to global administrators in
enterprise environments, as they are commonly stored in EntraID for user
support hotlines to retrieve them.
:::

## Conclusion: Balancing Innovation with Privacy

While "Recall" offers potential benefits for memory enhancement, the privacy implications cannot be ignored. Microsoft, as a responsible tech giant, needs to provide users with greater transparency and control regarding their data collection and storage. Furthermore, stricter opt-in policies should be implemented, especially for personal devices, and "Recall" should be disabled by default in work environments to safeguard user privacy.