557190 – Microsoft Purview: Data Loss Prevention – File Quarantine Action in DLP for SharePoint/OneDrive

Product:

OneDrive, Purview, Purview Communication Compliance, Purview Data Loss Prevention, SharePoint

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

File Quarantine action in Microsoft Purview DLP for SharePoint and OneDrive, enables stronger, immediate protection for sensitive data. When a DLP policy is triggered, the File Quarantine action automatically moves the file to a restricted, admin‑controlled & defined quarantine location—instantly removing access for all users while preserving the file for review and investigation. This capability helps organizations contain data‑exposure risks, prevents further sharing or misuse, and delivers a powerful new layer of enforcement.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2026-03-13

updated:
2026-03-14

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft Purview's Data Loss Prevention (DLP) feature for SharePoint and OneDrive uses a File Quarantine action to move files to a restricted location when a DLP policy is triggered, removing access for all users and allowing only administrators to review and manage the sensitive data securely.

Direct effects for Operations**

Data Accessibility
Immediate removal of access to sensitive files can disrupt user workflows and hinder productivity, as users may be unable to access necessary documents for their tasks.
   - roles: End Users, Data Analysts
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-loss-prevention-dlp-file-quarantine/ba-p/3651230

User Experience
Users may experience frustration and confusion due to sudden unavailability of files without prior notice, leading to decreased morale and potential resistance to IT policies.
   - roles: End Users, IT Support
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-loss-prevention-dlp-file-quarantine/ba-p/3651230

Incident Response Delays
The need for investigation and review of quarantined files can lead to delays in incident response, impacting the organization's ability to address data exposure risks promptly.
   - roles: IT Security Team, Compliance Officers
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-loss-prevention-dlp-file-quarantine/ba-p/3651230

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only