Microsoft Purview compliance portal: Exchange Data Loss Prevention - Image Metadata Scanning without OCR

🚨 The Signal: Purview DLP can now detect sensitive data in image metadata within Exchange, even without OCR. This significantly enhances data loss prevention for images, closing a previous blind spot.

The Impact

Security teams and compliance officers are affected by enhanced data protection capabilities, reducing the risk of sensitive information exfiltration via image metadata.

• Security Teams: Reduced risk of data exfiltration via image metadata.
• Compliance Officers: Improved adherence to data protection regulations.
• Data Owners: Enhanced protection for sensitive information in images.
• IT Administrators: Better visibility into image-based data risks.

The Action

1. Review existing Purview DLP policies targeting Exchange to ensure image metadata scanning is implicitly covered.
2. Consider creating new DLP policies specifically for image content if not already in place.
3. Monitor DLP alerts related to image metadata to fine-tune policy effectiveness.
4. Communicate enhanced image data protection capabilities to relevant stakeholders.

Domain: Purview · Impact: medium · Workload: Microsoft Purview