464996 – Microsoft Purview compliance portal: Data Loss Prevention – Actionable Email Notifications for Enhanced Incident Remediation

Product:

OneDrive, Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention, SharePoint

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

MC946947

Details:

Microsoft Purview Data Loss Prevention end-user email notification is getting advanced incident remediation capabilities: actionable email notifications. This new feature allows end users to take remediation actions directly from their mailbox, streamlining the remediation process. The end users will be able take remediation actions on files on OneDrive and SharePoint that caused a policy match. Key actions now available in our email notifications include - stop sharing file, delete file, apply label, override the policy, report false positive and unable to take action. Currently this feature is only available for OneDrive and SharePoint workloads.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-11-06

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Imagine you are managing a large library, and your job is to ensure that certain books don't leave the library without permission. To help with this, you've set up a system where alarms go off if someone tries to take a restricted book out. Now, let's say you want to make it easier for your staff to handle these alarms quickly and efficiently.

Microsoft Purview's new feature is like giving your library staff a remote control that lets them address these alarms without having to run back to the main desk. When an alarm goes off, they can use this remote to either stop the person from taking the book, remove the book from circulation, or even mark the book as safe if it was a false alarm. This remote control represents the actionable email notifications that allow users to take immediate actions directly from their email inbox.

For businesses, this means that when a file on OneDrive or SharePoint triggers a data loss prevention policy, the user who receives the notification can directly stop sharing the file, delete it, or take other necessary actions without needing to log into a separate system. This streamlines the process, making it quicker and easier to ensure that sensitive information is handled properly.

This feature is currently available for files stored in OneDrive and SharePoint, providing a more efficient way to manage data protection and compliance incidents as they arise.