Microsoft Purview compliance portal: Communication Compliance - Ability to set a retention period for a policy

🚨 The Signal: Purview Communication Compliance policies can now define content retention periods. This improves data lifecycle management for detected compliance violations, reducing long-term storage risk while meeting regulatory needs.

The Impact

Security and compliance teams are affected by improved data retention controls, reducing data sprawl and associated risks.

• Security Teams: Reduced risk from over-retained sensitive data.
• Compliance Teams: Better alignment with regulatory data retention mandates.
• Legal Teams: Clearer data disposition for compliance investigations.
• Privacy Officers: Enhanced control over personal data lifecycle.

The Action

1. Navigate to Microsoft Purview compliance portal > Communication Compliance.
2. Edit existing policies or create new ones.
3. Locate the 'Retention' settings within the policy configuration.
4. Define the appropriate retention period for content captured by the policy.
5. Review and publish the updated policy.

Domain: Purview · Impact: medium · Workload: Microsoft Purview