Microsoft Purview: Data Loss Prevention – Default Protection Controls for Exchange Online in the event of classification failure

🚨 The Signal: Microsoft Purview DLP now offers granular control for Exchange Online policies when data classification fails. Admins can create specific policies for different failure types (e.g., timeout, throttling), enhancing data protection beyond a single blanket rule.

The Impact

Security teams and compliance officers are affected, gaining improved control over data loss prevention during classification failures.

• Security Teams: Reduced risk of data exposure due to unclassified content.
• Compliance Officers: Better adherence to data protection regulations.
• DLP Administrators: Enhanced policy precision for Exchange Online.
• Data Owners: Improved assurance of data protection, even with system errors.

The Action

1. Navigate to Microsoft Purview compliance portal > Data loss prevention > Policies.
2. Create or edit a DLP policy for Exchange Online.
3. Under 'Advanced DLP rules', configure conditions for 'Content classification failed'.
4. Specify actions based on specific failure types (e.g., 'Timeout', 'Throttling').
5. Test the new granular DLP policy to ensure desired protection and minimal disruption.

Domain: Purview · Impact: medium · Workload: Microsoft Purview