Microsoft Purview: Data Lifecycle Management - Ensure regulatory compliance by deleting inactive OneDrives and mailboxes for departing employees

🚨 The Signal: Microsoft Purview now automates the deletion of inactive OneDrive accounts and mailboxes for departed employees. This ensures regulatory compliance and reduces data sprawl by automatically removing unneeded data.

The Impact

Security teams and compliance officers are affected by improved data hygiene and reduced risk of data exposure from inactive accounts.

• Security Teams: Reduced risk of data exfiltration from orphaned accounts.
• Compliance Officers: Easier demonstration of data retention policy adherence.
• IT Admins: Automated cleanup reduces manual effort and potential errors.
• Organisations: Enhanced data security posture by minimising inactive data.

The Action

1. Navigate to Microsoft Purview compliance portal > Data lifecycle management > Microsoft 365.
2. Create a new retention policy or modify an existing one.
3. Configure the policy to target inactive OneDrive accounts and Exchange mailboxes.
4. Define the retention period and the action to delete content and containers for departed users.
5. Review and publish the policy to automate deletion.

Domain: Purview · Impact: high · Workload: Microsoft Purview