MC791114 – (Updated) Data Loss Prevention: Decoupling policy tips and email notifications for SharePoint and OneDrive

Product:

Exchange, Microsoft 365 suite, OneDrive, Purview Communication Compliance, Purview Data Loss Prevention, SharePoint

Platform:

Web, World tenant

Status:

In development

Change type:

Admin impact, New feature, Updated message

Links:

394279

Details:

Summary:
Microsoft is updating Data Loss Prevention for SharePoint and OneDrive by separating policy tips and email notifications. Admins will be able to configure them independently. Rollout begins late June 2025, with General Availability by late September 2025. Admins can use PowerShell or Purview to configure settings after the update.

Details:
Updated February 12, 2025: We have updated the rollout timeline below. Thank you for your patience.
Coming soon to Microsoft Purview | Data Loss Prevention: When an admin wants to enable user email notifications, policy tips also need to be enabled and vice versa. After this rollout, notifications and policy tips will be decoupled, and admins can configure the following rules to enable:
Only a user email notification
Only a policy tip
A user email notification and a policy tip
No policy tips or user email notifications
After this rollout, policy tips and user email notifications will align with the behavior currently available with Microsoft Exchange.
This message is associated with Microsoft 365 Roadmap ID 394279.
[When this will happen:]
Public Preview: We will begin rolling out late June 2025 (previously late January) and expect to complete by late July 2025 (previously late February).
General Availability Worldwide: We will begin rolling out late August 2025 (previously late March) and expect to complete by late September 2025 (previously late April).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-05-08

updated:
2025-02-13

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

User Notification Confusion
Decoupling policy tips and email notifications may lead to confusion among users if they are not informed about the changes, potentially resulting in missed alerts regarding sensitive data handling.
   - roles: End Users, Compliance Officers
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=394279

Increased Administrative Overhead
Admins may face increased workload in configuring new settings post-rollout without proper preparation, leading to potential misconfigurations and compliance risks.
   - roles: IT Administrators, Compliance Officers
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=394279

Potential Data Breaches
If users are not adequately notified about sensitive data handling due to misconfigured settings, it could lead to data breaches and non-compliance with regulations.
   - roles: Data Protection Officers, IT Security Managers
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=394279

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced User Experience with Decoupled Notifications
By decoupling policy tips and email notifications, admins can tailor the user experience more effectively. For instance, they can choose to only send email notifications for critical data loss prevention alerts without overwhelming users with policy tips, or vice versa. This leads to clearer communication and reduces notification fatigue.
   - next-steps: 1. Train admins on how to configure the new settings using PowerShell or Purview. 2. Gather feedback from users to understand their preferences for notifications. 3. Update user training materials to reflect the changes in notification settings.
   - roles: IT Administrators, Compliance Officers, End Users
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=394279

Optimized Compliance Management
With the ability to configure notifications and policy tips independently, compliance officers can better manage compliance training and awareness among users. They can opt to use policy tips to educate users on compliance without sending excessive emails, which can help in reinforcing compliance culture within the organization.
   - next-steps: 1. Review existing compliance training materials to align with the new notification settings. 2. Conduct a compliance audit to identify areas for improvement in user awareness. 3. Develop a communication plan to inform users about the changes and how they will impact compliance training.
   - roles: Compliance Officers, Training Coordinators, IT Administrators
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=394279

Improved Administrative Efficiency
The new configuration options can streamline administrative tasks by allowing admins to set up rules that best fit the organization's needs without unnecessary duplication of efforts. This can reduce the time spent managing notifications and improve the focus on critical alerts.
   - next-steps: 1. Analyze current DLP rules and identify opportunities to simplify or optimize them with the new settings. 2. Implement a pilot program to test the new configuration options with a small group of users. 3. Monitor the effectiveness of the changes and make adjustments as necessary.
   - roles: IT Administrators, System Architects, Data Protection Officers
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=394279

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only