Microsoft Purview: Information Protection - Apply default SharePoint library labels to data at rest

🚨 The Signal: SharePoint libraries can now automatically apply default sensitivity labels to existing files at rest. This closes data labeling gaps, ensuring consistent, secure-by-default protection without manual user intervention.

The Impact

Security teams and data owners are affected by improved data protection and reduced risk of data exfiltration.

• Security Teams: Reduced risk of data exfiltration due to consistent labeling.
• Data Owners: Enhanced data protection and compliance for sensitive information.
• Compliance Officers: Improved attestation for data handling and classification.
• End Users: Less manual effort for applying sensitivity labels to documents.

The Action

1. Navigate to Microsoft Purview compliance portal > Information protection > Labels.
2. Create or modify a sensitivity label with desired protection settings.
3. Navigate to SharePoint admin center > Active sites.
4. Select a site, then click 'Policies' > 'Sensitivity' > 'Edit'.
5. Set a default sensitivity label for the library and enable 'Apply default label to existing items'.

Domain: Purview · Impact: high · Workload: Microsoft Purview