501787 – Microsoft Purview compliance portal: Data Loss Prevention: UX improvements to the DLP Alerts in Purview Portal

Product:

Microsoft 365 Apps, Purview Communication Compliance, Purview Data Loss Prevention

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

MC1148526

Details:

We’re excited to announce UX improvements to the DLP Alerts Portal in Purview to help you triage incidents faster and more efficiently. What’s New: 1. Unified View: Events related to each alert are now available directly on the alerts page — no need to switch to new tab or drill down. 2. Faster Access: Access event details (e.g. Impacted assets) with just 1 click on the main alerts page itself, compared to 4 clicks earlier, reducing triage time significantly. 3. Enhanced Context: We've added 4 new columns - Location, DLP Rule name, DLP Policy name, Rule Action to display key alert and event attributes upfront — giving you more visibility at a glance. 4. Performance Boost: Cache improvements to ensure faster load times and a smoother experience. These updates are designed to streamline your workflow, reduce response times, and give you the context you need — all in a single, efficient view.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-08-30

updated:
2025-08-30

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Microsoft has introduced some user experience improvements to the Data Loss Prevention (DLP) Alerts Portal within the Purview compliance platform. These changes are designed to make it easier and quicker for users to manage and respond to data loss incidents.

Imagine you're sorting through a stack of papers on your desk, each representing a different incident that needs your attention. Previously, you might have had to shuffle through multiple stacks or open several folders to find all the information related to a single incident. Now, with the new unified view, it's like having all the relevant papers neatly clipped together, so you can see everything at once without needing to open different folders. This means you can quickly assess the situation and decide what action to take.

Accessing details about each incident has also become more straightforward. Previously, it might have felt like navigating a maze, requiring several steps to reach the information you needed. Now, it's like having a shortcut that takes you directly to the key details with just one click, saving you time and effort.

Additionally, the new columns added to the alerts page provide more context at a glance. It's similar to having sticky notes on your papers that highlight the most important points, such as where the incident occurred, which rules and policies are involved, and what actions have been taken. This enhanced visibility helps you understand the situation better without having to dig deeper.

Finally, the performance improvements mean that everything loads faster, much like upgrading from a slow dial-up internet connection to high-speed broadband. This ensures a smoother and more efficient experience as you work through the alerts.

These updates aim to make your workflow more streamlined, allowing you to respond to incidents more quickly and with greater confidence.