Microsoft has decided to delay the full launch of its controversial Recall feature following criticism over data privacy and security, with access given to a smaller group of Windows users first.

The generative AI (genAI) powered Recall feature records "snapshots" of a user's screen every five seconds to provide a searchable log of actions going back three months. It is one of the flagship features for a range of Copilot+ PCs that promise to bring new genAI features to Windows. The PCs are set to launch next week.

While some have noted the potential benefits of the feature, security and privacy experts called Recall a "privacy nightmare" and likened it to keylogger malware. The UK's Information Commissioner's Office, a privacy watchdog, said it had written to Microsoft to "understand the safeguards in place to protect user privacy."

Microsoft has acknowledged the criticisms and recently outlined several privacy enhancements: Recall will now be switched off by default, and users are required to first enroll with Microsoft's Windows Hello authentication system. 

In an update to a previous blog post on Thursday, Microsoft outlined plans to delay the full launch, which was due to be made available in preview on all Copilot+ devices next week. Instead, it will be made available in preview via the Windows Insider Program in the "coming weeks," the company said. 

It's an indication that the company wants more time to test security and privacy features before a wider rollout. "We are adjusting the release model for Recall to leverage the expertise of the Windows Insider community to ensure the experience meets our high standards for quality and security," Pavan Davuluri, Microsoft's corporate vice president for Windows and devices, said in the blog post. "This decision is rooted in our commitment to providing a trusted, secure and robust experience for all customers and to seek additional feedback prior to making the feature available to all Copilot+ PC users."

Details about how to access the Windows Insider preview will be made public in a blog post, Microsoft said. 

Jeff Pollard, vice president and principal analyst at Forrester, called the move, "a significant decision, given the prominence of this feature in the PR leading up to its planned release. The design and development work necessary in this proximity to a launch is not minimal, so it's impactful to Microsoft in multiple ways."

He pointed to a security concept that features in his research: "securing what you sell."

"One consequence of not securing what you sell: news of the major security flaws will overtake the launch of the product. That happened here, and as a result Microsoft has forfeited the marketing momentum it wanted from this feature," he said.

The delayed Recall rollout should help address some the controversy surrounding the feature, he said. "The right move is not embedding a screenshotting, keylogging, full monitoring spyware into an operating system," said Pollard. "But, given that Microsoft already elected to build such a feature..., this is a good move to clean up the mess it already made."