OneDrive: PDF annotation for sensitivity-label protected PDFs in the OneDrive apps (iOS and Android)

🚨 The Signal: OneDrive mobile apps now allow annotation of sensitivity-labeled, encrypted PDFs without removing protection. This enhances secure collaboration on sensitive documents on mobile devices, preserving data integrity and access controls.

The Impact

Mobile users can now securely annotate sensitive PDFs, reducing data leakage risk but requiring security teams to verify policy enforcement.

• Mobile users: Can now securely annotate protected PDFs, improving productivity.
• Security teams: Must verify Purview policies are correctly applied and enforced.
• Compliance officers: Enhanced assurance of data protection on mobile platforms.
• Data owners: Reduced risk of sensitive PDF content being exposed during mobile editing.

The Action

1. Verify existing Microsoft Purview Information Protection sensitivity labels are correctly configured for encryption and usage rights via Microsoft Purview compliance portal.
2. Review mobile device access policies in Microsoft Intune to ensure only compliant devices can access sensitive data.
3. Communicate to end-users the new secure annotation capabilities and best practices for handling sensitive information on mobile devices.
4. Monitor Purview audit logs for activity related to sensitive PDF access and annotation on mobile devices.

Domain: Purview · Impact: medium · Workload: OneDrive