PDF annotation for sensitivity-label protected PDFs in the OneDrive apps (iOS and Android)

🚨 The Signal: OneDrive mobile apps will allow annotation of sensitivity-labeled, encrypted PDFs. This improves mobile productivity by decrypting, marking up, and re-encrypting files locally, maintaining data protection while enabling on-device editing for authorized users.

The Impact

Users with editing rights on mobile devices are affected, with a low security risk due to local decryption and re-encryption.

• Mobile users can now edit encrypted PDFs.
• Data remains protected by sensitivity labels.
• Local decryption and re-encryption occurs.
• No change to existing access controls.

Domain: Purview · Impact: low · Workload: OneDrive