MC1296479 – Microsoft Purview | Data Security Investigations: Introducing new custom examination focus areas

Product:

Entra, Microsoft 365 Apps, Purview, Purview Communication Compliance

Platform:

Online, Web, World tenant

Status:

In development

Change type:

New feature, User impact

Links:

560598

Details:

Summary:
Microsoft Purview Data Security Investigations will support custom examination focus areas from mid-May 2026, allowing admins to tailor AI-powered investigations to prioritize specific sensitive information. This feature respects existing permissions, requires no pre-rollout action, and enhances investigation efficiency without changing data storage or access.

Details:
[Introduction]
Microsoft Purview Data Security Investigations (DSI) is adding support for custom examination focus areas. This feature will empower admins to tailor examinations to their specific needs based on the type of investigation being performed and the types of information they want to prioritize. This capability extends DSI's existing AI-powered deep content analysis used to identify data security risks.
This message is associated with Microsoft 365 Roadmap ID 560598.
[When this will happen]
Public Preview: Rollout begins in mid-May 2026 and is expected to complete by mid-June 2026.
General Availability (Worldwide): Rollout begins in mid-June 2026 and is expected to complete by late June 2026.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2026-05-01

updated:
2026-05-01

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Custom Examination Focus Areas
The introduction of custom examination focus areas may lead to inconsistencies in investigation outcomes if admins are not adequately trained on how to utilize this feature effectively, potentially resulting in overlooked data security risks.
   - roles: Microsoft 365 Admins, Investigators
   - references: https://learn.microsoft.com/purview/data-security-investigations" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/data-security-investigations, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=560598

AI-Powered Analysis Changes
The modification of AI-powered analysis capabilities could lead to misinterpretation of data security risks if the custom focus areas are not aligned with organizational priorities, affecting the overall security posture.
   - roles: Microsoft 365 Admins, Investigators
   - references: https://learn.microsoft.com/purview/data-security-investigations" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/data-security-investigations-ai-analysis#use-examination-tools, https://learn.microsoft.com/purview/data-security-investigations" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/data-security-investigations

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only