Microsoft Purview: Data Loss Prevention - Extend Purview data security to the network layer via Entra GSA integration

🚨 The Signal: Purview DLP now integrates with Entra Internet Access to inspect network traffic for sensitive data, including AI prompts. This extends data loss prevention to untrusted cloud applications and generative AI platforms.

The Impact

Security teams are affected by new data protection capabilities, reducing the risk of sensitive data exfiltration to untrusted cloud services.

• Security Teams: Risk of sensitive data exfiltration to AI platforms is reduced.
• Security Teams: New capabilities for network-level data inspection and policy enforcement.
• Admins: Requires configuration of Entra Internet Access and Purview DLP policies.
• Users: Unchanged, but their data interactions are now more securely monitored.

The Action

1. Review Entra Internet Access deployment for network traffic forwarding.
2. Configure Purview DLP policies to include network-level inspection.
3. Define sensitive information types relevant to AI interactions and untrusted cloud apps.
4. Establish incident response procedures for network DLP alerts in Purview and Defender.

Domain: Purview · Impact: high · Workload: Microsoft Purview