117569 – Microsoft Purview compliance portal: eDiscovery (Premium) – CMK (Customer Managed Keys) encryption support for data at-rest in Review sets

Product:

eDiscovery, Purview, Purview Communication Compliance, Purview compliance portal

Platform:

Web, World tenant

Status:

In development

Change type:

Feature update, User impact

Links:

Details:

This release of eDiscovery features the implementation of customer-managed key (CMK) options, allowing users to manage their own encryption keys for the data stored in eDiscovery review sets in addition to the default, strong Microsoft-managed encryption already in place.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2023-03-16

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Data Access Issues
If the change to customer-managed keys is implemented without proper preparation, users may face access issues to their eDiscovery review sets due to misconfigured encryption keys, leading to potential data loss or inability to retrieve necessary information.
   - roles: Compliance Officer, IT Administrator
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-compliance-portal-ediscovery-premium-customer/ba-p/3741230

User Experience Degradation
The introduction of customer-managed keys without adequate training and communication may lead to confusion among users regarding how to manage their keys, resulting in a degraded user experience and increased support requests.
   - roles: End User, Support Staff
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-compliance-portal-ediscovery-premium-customer/ba-p/3741230

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

explanation for non-techies**

Imagine you have a safe deposit box at a bank. The bank provides a strong lock to keep your valuables secure, and they manage the key to that lock. This is similar to how Microsoft traditionally manages encryption for data in eDiscovery review sets. They provide strong encryption to protect your data, and they hold the keys to that encryption.

Now, with the introduction of Customer Managed Keys (CMK) in Microsoft Purview's eDiscovery (Premium), it's like the bank giving you the option to use your own lock and key for your safe deposit box. You still have the bank's robust security system in place, but now you have the added control of managing your own key. This means you decide who has access to your data, and you can change the key whenever you want, adding an extra layer of security and control.

For legal professionals, managers, or HR staff, this change means you have more autonomy over your sensitive information. You can ensure that only authorized individuals within your organization have access to the encryption keys, aligning with your internal compliance and security policies. It's about giving you more control over your data while still benefiting from the security infrastructure provided by Microsoft.