check before: 2026-05-01
Product:
OneDrive, Purview, Purview Communication Compliance, Purview Data Loss Prevention, SharePoint
Platform:
Web, World tenant
Status:
In development
Change type:
Links:
Details:
File Quarantine action in Microsoft Purview DLP for SharePoint and OneDrive, enables stronger, immediate protection for sensitive data. When a DLP policy is triggered, the File Quarantine action automatically moves the file to a restricted, admin‑controlled & defined quarantine location—instantly removing access for all users while preserving the file for review and investigation. This capability helps organizations contain data‑exposure risks, prevents further sharing or misuse, and delivers a powerful new layer of enforcement.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2026-03-13
updated:
2026-03-13
Public Preview Start Date
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft Purview's Data Loss Prevention (DLP) feature for SharePoint and OneDrive uses a File Quarantine action to move files to a restricted location when a DLP policy is triggered, removing access for all users and allowing only administrators to review and manage the sensitive data securely.
Direct effects for Operations**
Data Accessibility
Immediate removal of access to sensitive files can disrupt user workflows and hinder productivity, as users may be unable to access necessary documents for their tasks.
- roles: End Users, Data Analysts
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-loss-prevention-dlp-file-quarantine/ba-p/3651230
User Experience
Users may experience frustration and confusion due to sudden unavailability of files without prior notice, leading to decreased morale and potential resistance to IT policies.
- roles: End Users, IT Support
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-loss-prevention-dlp-file-quarantine/ba-p/3651230
Incident Response Delays
The need for investigation and review of quarantined files can lead to delays in incident response, impacting the organization's ability to address data exposure risks promptly.
- roles: IT Security Team, Compliance Officers
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-loss-prevention-dlp-file-quarantine/ba-p/3651230
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
XXXXXXX ... free basic plan only
Potentional Risks**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
Hypothetical Work Council Statement**
XXXXXXX ... paid membership only
DPIA Draft**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
