484084 – Microsoft Purview: Discovery of sensitive data sharing to any cloud application or website (inc. GenAI) via network layer

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Information Protection, Purview Insider Risk Management

Platform:

Web, World tenant

Status:

Launched

Change type:

Links:

MC1102773

Details:

With this update, IRM will support the discovery of sensitive files and text shared to any cloud application or website (inc. GenAI) via network layer. This capability is based on integration with 3rd party network partners (with data being captured via network layer). Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-03-11

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Imagine your office as a busy airport. Each piece of data, whether it's a document or an email, is like a passenger trying to board a flight. Just as airport security checks passengers to ensure they are not carrying anything dangerous, Microsoft Purview's new feature acts as a security checkpoint for your data. It monitors and identifies sensitive information that might be leaving your organization, whether it's being shared on cloud applications, websites, or even with AI tools like GenAI.

This system works by partnering with network providers, much like how airports coordinate with various security agencies to ensure safety. The data is checked at the network level, which is akin to scanning luggage before it gets on the plane. If any data is deemed sensitive or potentially harmful, the system flags it, similar to how security might stop a passenger with a suspicious item.

The Insider Risk Management feature is like having a team of detectives who look for patterns that might indicate a risk, such as someone trying to take company secrets (IP theft) or accidentally sharing confidential information (data leakage). These detectives use clues (signals) from various sources to piece together the full picture, ensuring that any potential risks are caught early.

Privacy is a top priority, so just like how airports respect passenger privacy while maintaining security, this system uses pseudonyms for users by default. This means that while the system monitors data, it doesn't directly expose personal information. Only those with the right permissions, like security personnel with special clearance, can access detailed information, ensuring that privacy is maintained while security is enforced.

In essence, this update is about creating a safer environment for your organization's data, much like how airports strive to keep passengers safe while respecting their privacy.