Hide guest email address from other guests
Would like to use Teams as a platform to interact with coworkers and employees that don't have a company email or Office 365 account. The only thing preventing this from happening, is that their private/personal email addresses are shared with others. To protect their privacy, I'd like the ability to hide their contact info from other guests.
Anonymous
shared this idea
40 comments
-
Anonymous
commented
My company has groups of 30 guests visiting each month who need to be able to have digital discussions with each other and with staff while they are here. We'd love to switch to Teams for this instead of Facebook groups, but having people's personal email account and/or other info exposed in this way is a complete dealbreaker. My company is located in the US, but many of our guests are EU residents, which also makes GDPR a concern.
-
Anonymous
commented
I tried to prevent it with this: https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/users-restrict-guest-permissions but it does not prevent seeing user details (email AND phone number!!!) in "manage team" (why can a guest manage a team in the first place?). This is a show-stopper at the moment. It really surprises me as it looks like a huge security problem. If people are being invited as guests they certainly do not expect their email address to be exposed to all other guests/strangers. I would say this is a bug in Microsoft Teams and certainly a reason to stay away from it if you don't want to get in HIPAA or GDPR troubles. I can only imagine that many non-IT organizations such as schools don't really know of this issue. It's the equivalent of sending all parents and student emails on CC in emails.
-
Anonymous
commented
Guests are defined in Azure AD, so they are known entities that participate in a team using Teams. If you want to anonymously meet people then don't define them as guests and don't include them in a Team with other guests.
-
Martine PlatteauGuillaume
commented
Teams in Europe should really be GDPR compliant !
-
Anonymous
commented
.
-
Anonymous
commented
https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/users-restrict-guest-permissions - this setting was supposed to prevent guest users enumerating details of other users including other guests however within Microsoft Teams it just prevents ability to click on a member profile, it does not mask their name under "manage team", which now shows their full email address.
Privacy by design?..... not
-
Jim
commented
working in an online educational setting, using Teams and Sharepoint - this is essential for GDPR compliance. How has it not been implemented???
-
JCox
commented
This issue causes more problems than anything else when my organisation is setting up training sessions with people from other organisations whether they use Teams internally or not. When in a physical room people can choose what private info they share with whom; Teams denies them this choice (some might call it a right under various regional legislations).
-
Stephan
commented
It looks like there is a preview Feature available, not tested yet . but i think it goes in the right direction.
"When guest access is restricted, guests can view only their own user profile. Permission to view other users isn't allowed even if the guest is searching by User Principal Name or objectId. Restricted access also restricts guest users from seeing the membership of groups they're in."
-
Leo Martinez
commented
MS' response or lack thereof is quite interesting considering that publishing email addresses in a way is not exactly recommended security practice.
-
neilt
commented
Revealing users email address makes this product completely unsuitable for "community" type use. e.g. a sports club with all the members, a children's org with all the Parents, a school based Team/channel with all the parents, etc.
You *must not* reveal users email addresses. I cannot see how this is GDPR compliant and surely will cause many privacy breaches.
-
Jason
commented
Not being able to mask email addresses of GUESTS is a hard block for our project.
-
ながおひろあき commented
1000000% agreed
-
Mokudai
commented
This feature is very important. In particular, the free version of Teams is available to local communities, technical communities, and various communities, but it is easy to collect personal email addresses, so it is used for ****** harassment, fraud, etc. You need to hide the user's email address immediately
-
Anonymous
commented
The request for this feature is growing.
-
Jantje Dube
commented
Hello, I also need the possibility to make the guest email adress within one Teams groupt invisible. Germany is very strict concerning data security. Is this now possible? I found a place in the admin center where it seemed to be solved but in microsoft teams it did not change anything.
-
LL
commented
Seems like this should have been a must have feature considering data privacy, how has this not been addressed already?
-
Rose
commented
Hello: I work as a psychotherapist, and in speaking to sales as to what Microsoft Office might be best for my small practice, I decided to go with Microsoft Office for Business, although the only other function that I might have needed added to my suit was Teams. I told the sales rep what I would use Teams for, i.e., Telehealth, and that I would have to comply by HIPAA regulations--i.e., not sharing client information,etc., and that I would also need a BAA. I was informed that both of these could be furnished in buying Microsoft for Business. After many calls to Microsoft, I was finally able to secure the BAA (although this is the FIRST BAA, and I now have about a dozen of these, where I've only received a standard BAA--i.e., I did not sign the agreement on the document itself). The bigger issue is that Teams does not comply by HIPAA regulations for telemedicine, as the emails of the users who join a meeting cannot be hidden--meaning that if I were to use this product, then I am disclosing PHI and in breach of HIPAA. Moreover, I don't want patients having my email as well, as this creates more loopholes in HIPAA wherein patients could be emailing me now with protected health information, etc. I am very disappointed that Teams does not account for all types of users in constructing this platform. I have heard of great things from other organizations, Education, etc., where Teams works great for their purposes, and wherein people that attend the meetings do not see one another's email, or gain access to their email. Obviously if I were just meeting with individual clients, this might not be an issue (although access to my email still would be), but I often conduct groups, family session, etc., or other care conference meetings with clients and professionals.
-
Anonymous
commented
I have spent a great deal of time investigating how to use Teams with guest users. What a nightmare. By default they can rename files, delete files, share files etc and the only way you can restrict this is to go into Sharepoint??!. Then I discover that guests can see each others' email addresses. That was the nail in the coffin for me. We simply cannot use this with external guests for that reason.
-
Virginie Tijtgat
commented
This is a very important feature! We've chosen Microsoft for our school because of it being compliant with the privacy regulations (GDPR). Now we have noticed parents who are added as guests can see each others email adresses (not so GDPR proof). We've had complaints about this en had to remove some parents. It would be great if this issue could be solved.