HMRC Deploys Microsoft Copilot to 28,000 Staff

HMRC has distributed 28,000 Microsoft Copilot licences to staff, and its chief AI officer, James Mitton, said the department is preparing to activate agent features in Copilot Chat, according to reporting by Think Digital Partners on April 23, 2026. Mitton is quoted as saying, "We have rolled out 28,000 Copilot licences," and that agents were due to be switched on shortly, per Think Digital Partners. A Whitehall trial reported by The Register estimated Copilot saved roughly 26 minutes per user per day and found that "over 70 percent" of participants reported reduced time searching for information, while 82 percent said they would not want to return to prior workflows, The Register reports. The Register additionally documents trial caveats about "limitations... when dealing with complex, nuanced, or data-heavy aspects of work" and raises concerns about security and sensitive-data handling.

Wider technology reporting frames this as a shift from limited pilots to broad frontline deployment. Deploying a generative assistant to tens of thousands of users and enabling agent capabilities raises two recurring technical themes for practitioners: data surface governance and integration quality. Poorly indexed or conflicting internal documents can cause hallucination and inconsistent outputs, an issue The Register highlights when it notes that government IT estates often feed tools outdated or conflicting information. Industry-pattern observations: organisations rolling Copilot-style assistants into operational workflows generally need robust retrieval pipelines, clear guardrails around sensitive data, and monitoring to detect regressions once agents are given more autonomy.

For practitioners, the scale and classification level matter. Think Digital Partners reports Mitton wants staff to use Copilot at the "Official Sensitive" level, which elevates data-protection and audit requirements compared with email-drafting pilots. Industry observers note that moving from productivity gains in low-risk tasks to higher-trust workflows typically uncovers gaps in access control, explainability, and incident response readiness.

Observers should monitor how HMRC implements data access controls and logging for agent actions, whether there are documented accuracy or safety SLAs, and any public evaluations or audits following wider rollout. Also watch for guidance from central UK government bodies on using generative AI in classified or "Official Sensitive" contexts and for vendor commitments from Microsoft on auditing, red-teaming, and data handling for Copilot in government deployments.