502519 – Microsoft Purview compliance portal: Endpoint Data Loss Prevention: Expand protection to Copilot + PC devices for Recall snapshots through custom policies

Product:

Copilot, Intune, Purview Communication Compliance, Purview Data Loss Prevention, Purview Information Protection

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

Microsoft Purview Endpoint data loss prevention is expanding coverage to Copilot + PCs initially to support Recall snapshots and determining whether policies exist to prevent capture of windows containing restricted sensitivity labels and Sensitive information types (SITs). Purview admins will author Endpoint DLP custom policies to integrate with Windows Copilot + PC Recall setup by Intune admins for Copilot + PC devices exclusively.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-09-19

updated:
2025-10-02

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Data Loss Prevention Policy Misconfiguration
If the new Endpoint DLP policies are not properly configured before implementation, sensitive data may be inadvertently exposed or captured, leading to potential data breaches.
   - roles: Purview Admin, Intune Admin
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/what-s-new-in-microsoft-purview-data-loss-prevention/ba-p/3651230" target="_blank" rel="nofollow noopener noreferrer">https://techcommunity.microsoft.com/t5/security-compliance-identity/what-s-new-in-microsoft-purview-data-loss-prevention/ba-p/3651230, https://www.microsoft.com/en-us/security/blog/2023/09/12/introducing-microsoft-purview-data-loss-prevention/ " target="_blank" rel="nofollow noopener noreferrer">https://www.microsoft.com/en-us/security/blog/2023/09/12/introducing-microsoft-purview-data-loss-prevention/

User Experience Disruption
Without proper preparation, users may experience disruptions in their workflow due to unexpected restrictions or alerts from the new DLP policies, impacting productivity.
   - roles: End Users, IT Support
   - references: https://www.microsoft.com/en-us/security/blog/2023/09/12/introducing-microsoft-purview-data-loss-prevention/, https://techcommunity.microsoft.com/t5/security-compliance-identity/what-s-new-in-microsoft-purview-data-loss-prevention/ba-p/3651230" target="_blank" rel="nofollow noopener noreferrer">https://techcommunity.microsoft.com/t5/security-compliance-identity/what-s-new-in-microsoft-purview-data-loss-prevention/ba-p/3651230

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Imagine you have a security guard at the entrance of a building. This guard's job is to ensure that only authorized people can enter and that no one takes sensitive documents out without permission. In the world of IT, Microsoft Purview Endpoint Data Loss Prevention (DLP) acts like this security guard, but for your digital information.

Microsoft is now enhancing this security system to work with new tools like Copilot and PC devices. Think of Copilot as a smart assistant that helps you with tasks on your computer. Just like how a security guard might need to check different types of identification, Purview DLP is being updated to recognize new kinds of sensitive information and ensure that they are protected when using Copilot and PCs.

To make this happen, administrators (like the building managers) will create special rules, or "custom policies," that tell the system what to look out for. These rules are like instructions for the security guard, detailing what is considered sensitive and what actions should be taken if someone tries to access or share this information.

For example, if a document is labeled as "confidential," the system will know to prevent it from being copied or shared without proper authorization. This is similar to how a security guard might stop someone from leaving the building with a confidential file unless they have the right permissions.

The integration with Windows Copilot and PC Recall, managed by Intune (a tool for managing devices), ensures that these rules are consistently applied across all devices. It's like having a network of security guards who all follow the same set of instructions, ensuring that no matter where someone tries to access sensitive information, the same protective measures are in place.

In summary, Microsoft is enhancing its digital security measures to better protect sensitive information across new tools and devices, much like upgrading a security system to handle new types of identification and access points.