The office of Civil Rights established Privacy Audit Protocol containing the requirements that are assessed through OCR performance audits as of July 2012.

Microsoft AI Employee Accidentally Exposes 38TB of Private Data
Unveiling the Microsoft AI Mishap Corporate secrets, passwords, and over 30,000 internal Microsoft Teams messages lost their cloak of invisibility when Microsoft AI researchers misconfigured