Microsoft Purview: Data Loss Prevention for Microsoft Cowork

🚨 The Signal: Microsoft Purview DLP now extends to Microsoft Cowork, enabling unified policy enforcement across Copilot and Cowork. This protects sensitive AI interactions by preventing the use of labeled data, blocking sensitive prompts, and restricting sensitive prompts from Bing web searches.

The Impact

Security teams and data owners are affected by enhanced data protection capabilities for AI interactions, reducing the risk of sensitive information exposure.

• Security Teams: Reduced risk of sensitive data exposure in AI interactions.
• Data Owners: Improved control over how sensitive data is used by AI.
• Compliance Officers: Better adherence to data protection regulations with AI.
• End Users: Prompts containing sensitive data may be blocked, affecting AI usage.

The Action

1. Review existing Purview DLP policies for applicability to Microsoft Cowork.
2. Create new DLP policies or modify existing ones to include Microsoft Cowork as a location.
3. Define or refine sensitive information types (SITs) relevant to AI interactions.
4. Configure rules to block prompts containing SITs or prevent use of labeled data sources.
5. Test DLP policies in Cowork to ensure proper sensitive data protection.

Domain: Purview · Impact: high · Workload: Microsoft Purview