AI

The Copilot Compliance Gap: Why UK IT Directors are Pulling the Plug in 2026


As we move through the first quarter of 2026, the initial excitement surrounding Microsoft 365 Copilot has hit a cold, hard wall of British pragmatism. While marketing promised a “productivity revolution”, many UK SMEs are finding that the reality is closer to a “governance nightmare”.

At System Plus, the honeymoon phase is over. Here is why the £25-per-month seat is becoming a difficult line item to justify, and why the “Training Gap” is the real reason your AI investment feels like a waste of money.


1. The July 2026 Price Hike: No More Promotional Shield

Many UK businesses have been coasting on a promotional rate of £13.80 per user/month. However, that shield is about to vanish.

Microsoft has confirmed a global commercial price increase effective from 1 July 2026. For UK organisations, the “Copilot Business” add-on is set to jump to its full list price of £16.10, while the base plans like Business Standard and Office 365 E3 are also seeing 8–12% increases.

The System Plus Warning: If you are on Business Standard, your total monthly cost per user is about to hit £25.70. For a 50-person firm, that’s an annual commitment of over £15,000. If you haven’t locked in your annual renewal before June 30th, your 2026/27 budget is about to take a significant hit.


2. The “Useless” AI: Why Training is the Real Bottleneck

The most common complaint we hear from IT desks across the UK isn’t that the software is broken, but that users simply don’t know how to talk to it.

Without proper training, Copilot is essentially an expensive “summarise” button. We are seeing a massive “Confidence-Capability Gap” in 2026:

  • The “Search” Fallacy: Users treat Copilot like a search engine, asking “Where is the X project file?” when they should be asking “Draft a project summary based on the X folder.”
  • Hallucination Fatigue: Because users aren’t trained to verify the output, they get burnt once by a wrong figure in Excel and then never touch the tool again, branding it “useless.”
  • The ROI Math: Data from UK government trials shows that a trained user saves an average of 19–26 minutes per day. An untrained user saves zero. To break even on a £200+ annual licence, a Project Manager only needs to save about 30 minutes a month. The fact that they aren’t achieving this is a failure of education, not technology.

3. The Sensitivity Label Scandal (Bug CW1226324)

It’s not just about money and training; it’s about safety. In February 2026, Microsoft confirmed a significant vulnerability where Copilot was found to be ignoring sensitivity labels.

Specifically, the AI was accessing and summarising emails marked as “Confidential” within users’ Sent Items and Drafts folders. For a UK legal firm or a medical practice, this isn’t just a technical glitch, it is a potential GDPR breach. If your AI can surface a confidential draft salary review simply because a staff member asked a vague question, your data protection impact assessment (DPIA) is effectively void.


4. The “Over-Permissioning” Trap

The most common phrase in UK IT departments this year is “AI-driven oversharing”.

Copilot doesn’t have its own permissions; it inherits the user’s. The issue? Most UK businesses have “lazy” SharePoint permissions. Files that were supposed to be “hidden” but were accidentally shared with “Everyone except external users” years ago are now being indexed and served up on a silver platter.

  • The Result: Employees are inadvertently discovering redundancy plans and private HR notes through simple chat prompts.
  • The Cost: Fixing this isn’t a simple toggle. Many UK consultants are charging upwards of £5,000 to £15,000 just to perform the “Governance Tax” audit required to make a 50-person environment safe.

The 2026 Copilot “Keep or Cancel” Audit

Before you commit to another year of licensing at the new July rates, run through this 5-point checklist:

  1. Permission Triage: Have you run a SharePoint “Oversharing Report” to see what files are marked “Shared with everyone”?
  2. Sensitivity Check: Have you verified in your Admin Centre that the CW1226324 fix has been “saturated” (applied) to your specific UK tenant?
  3. Prompt Training: Has every user with a licence completed at least 2 hours of prompt engineering training? (If not, they are likely wasting the licence).
  4. Usage Audit: Check your M365 Admin usage reports. If a user hasn’t interacted with Copilot in the last 28 days, reclaim that licence immediately.
  5. Data Residency: For UK legal/gov work, have you confirmed your data is staying within the UK South or UK West regions?

Final Thoughts

The “magic” has worn off. If you’re a UK business leader, 2026 is the year of Pragmatic AI.

Don’t buy more licences until you have audited your SharePoint permissions and, more importantly, invested in a proper training programme. Without it, you aren’t buying a “productivity assistant”, you’re just buying a very expensive way to get the wrong answers faster.


Discover more from System Plus

Subscribe to get the latest posts sent to your email.

Author

Richard Eborall

With over 20 years of experience in the IT industry, Richard is a Microsoft specialist and trusted advisor to businesses. He writes with a focus on practical, jargon-free guidance to help people get the most from their technology, whether they’re managing a team, running a business, or just trying to stay connected.

Leave a Reply

Discover more from System Plus

Subscribe now to keep reading and get access to the full archive.

Continue reading