MC1003342 – Microsoft Purview | Endpoint Data Loss Prevention: Labeling improvement for non-Office files and PDF files

Product:

Purview Communication Compliance, Purview Data Loss Prevention, Purview Information Protection, Windows

Platform:

Online, Web, World tenant

Status:

In development

Change type:

New feature, User impact, Admin impact

Links:

476494

Details:

Before this rollout, users can apply a sensitivity label to a non-Office file or a PDF file in Microsoft Windows to apply protection that encapsulates the file into a .pfile file type that can verify user authorization and rights on the file. A user who needs to modify and collaborate with others on a .pfile can use Microsoft Purview Information protection (MPIP) to remove the label and protection on the .pfile, make changes, and then reapply the label and protection to the updated file.
After this rollout, Microsoft Purview Endpoint Data Loss Prevention (EDLP) will be able to simplify and protect the collaboration experience in managed Windows devices in conjunction with the MPIP client. Non-Office files and PDF files stored on managed devices will be labeled while retaining their original file types to allow a user to modify and update the file on their device. When a user copies and uploads a labeled file to a destination external to their Windows device, EDLP will help enforce the rights protection by converting the file to a .pfile for secure sharing to other users. If the other users are also protected with EDLP, they can use MPIP to remove the label on the shared files before collaborating.
This message is associated with Microsoft 365 Roadmap ID 476494.
[When this will happen:]
Public Preview: We will begin rolling out mid-March 2025 and expect to complete by mid-April 2025.
General Availability (Worldwide): We will begin rolling out mid-May 2025 and expect to complete by mid-June 2025.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-02-12

updated:
2025-02-12

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

File Access and Collaboration
Users may experience confusion or disruption when transferring RMS-labeled files, as the files will be converted to .pfile format without prior notice, potentially impacting their ability to collaborate effectively.
   - roles: End Users, IT Support
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476494

User Training and Documentation
Lack of preparation may lead to insufficient user understanding of the new labeling process, resulting in increased support requests and decreased productivity during the transition period.
   - roles: End Users, IT Trainers
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476494

Data Loss Prevention Configuration
If the feature is enabled without proper configuration review, it may lead to unintended data exposure or compliance issues due to mismanaged labeling of sensitive files.
   - roles: IT Administrators, Compliance Officers
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476494

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced User Collaboration
The new labeling improvement allows users to collaborate on non-Office and PDF files without converting them to .pfile formats until necessary. This improves user experience by enabling seamless editing and sharing, reducing friction in workflows.
   - next-steps: Conduct training sessions for users to familiarize them with the new labeling process and its benefits. Update internal documentation to reflect the new features and best practices for collaboration.
   - roles: Project Managers, Team Leaders, Collaborative Teams
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476494

Streamlined IT Administration
The automatic rollout of the new labeling feature requires minimal admin intervention, allowing IT staff to focus on other strategic initiatives rather than manual updates or configurations. This efficiency can lead to better resource allocation within the IT department.
   - next-steps: Review current DLP configurations to ensure compatibility with the new feature. Prepare a communication plan to inform IT staff about the changes and the expected benefits.
   - roles: IT Administrators, Compliance Officers
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476494

Improved Data Security
With the integration of Endpoint Data Loss Prevention, the protection of sensitive information is enhanced as files are only converted to .pfile when necessary. This ensures that sensitive data remains secure during collaboration and sharing processes.
   - next-steps: Evaluate current data protection policies and update them to incorporate the new labeling and sharing capabilities. Conduct risk assessments to identify any potential vulnerabilities.
   - roles: Data Protection Officers, Security Analysts
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476494

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only