502519 – Microsoft Purview compliance portal: Endpoint Data Loss Prevention: Expand protection to Copilot + PC devices for Recall snapshots through custom policies

Product:

Copilot, Intune, Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention, Purview Information Protection, Windows

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

Microsoft Purview Endpoint data loss prevention is expanding coverage to Copilot + PCs initially to support Recall snapshots and determining whether policies exist to prevent capture of windows containing restricted sensitivity labels and Sensitive information types (SITs). Purview admins will author Endpoint DLP custom policies to integrate with Windows Copilot + PC Recall setup by Intune admins for Copilot + PC devices exclusively.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-09-19

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Data Loss Prevention Policy Implementation
Without proper preparation, the implementation of new Endpoint DLP policies may lead to unintentional data exposure or loss, as existing policies may not cover new scenarios introduced by Copilot integration.
   - roles: Purview Admins, Intune Admins
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-endpoint-data-loss-prevention-dlp/ba-p/3651230" target="_blank" rel="nofollow noopener noreferrer">https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-endpoint-data-loss-prevention-dlp/ba-p/3651230, https://www.microsoft.com/en-us/security/blog/2023/09/12/introducing-microsoft-purview-endpoint-data-loss-prevention/ " target="_blank" rel="nofollow noopener noreferrer">https://www.microsoft.com/en-us/security/blog/2023/09/12/introducing-microsoft-purview-endpoint-data-loss-prevention/

User Experience Disruption
Users may experience disruptions or limitations in their workflows if the new DLP policies restrict access to necessary applications or data without prior notice or training.
   - roles: End Users, IT Support Staff
   - references: https://www.microsoft.com/en-us/security/blog/2023/09/12/introducing-microsoft-purview-endpoint-data-loss-prevention/, https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-endpoint-data-loss-prevention-dlp/ba-p/3651230" target="_blank" rel="nofollow noopener noreferrer">https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-endpoint-data-loss-prevention-dlp/ba-p/3651230

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft is enhancing its Purview compliance tools to offer better protection for sensitive data on devices using Copilot and PCs. Think of it like adding an extra layer of security to your office's filing cabinets. Just as you might lock away sensitive documents to prevent unauthorized access, Microsoft Purview's Endpoint Data Loss Prevention (DLP) now helps ensure that sensitive information on your computers is kept secure.

This update allows for the creation of custom policies that can prevent the capture of sensitive information on devices using Windows Copilot and PCs. Imagine if you had a security guard who could check every document leaving the office to ensure no confidential information was being taken out. In this case, the "security guard" is the custom policies set up by Purview admins, which work to prevent unauthorized access or sharing of sensitive data.

These policies are designed to recognize and protect information labeled as sensitive or restricted. It's similar to having a system that recognizes and alerts you when someone tries to photocopy a document marked "confidential." The integration with Intune, a tool for managing devices, ensures that these protections are specifically tailored for devices using Copilot and PCs, making sure that the right security measures are in place.

Overall, this enhancement to Microsoft Purview's capabilities is like upgrading your office's security system to better protect your valuable information, ensuring that sensitive data stays where it belongs and is only accessed by those who are authorized.