MC1024387 – Microsoft Purview | Data Loss Prevention: New predicates for email DLP to detect number of domains or recipients

Product:

Exchange, Microsoft 365 suite, Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention

Platform:

Online, US Instances, Web, World tenant

Status:

Launched

Change type:

New feature, Admin impact

Links:

483158

Details:

Summary:
New predicates for email Data Loss Prevention in Microsoft Purview will allow organizations to set policies based on the number of recipients or domains in outgoing emails. This feature, rolling out in 2025, enhances data security and compliance. No admin action is required before the rollout. More details are available in Microsoft 365 Roadmap ID 483158.

Details:
Customers have expressed a significant pain point in managing and controlling the distribution of sensitive information in email. The lack of predicates to monitor the number of recipients or domains in outgoing emails poses a risk of data leaks and non-compliance with regulatory requirements. We are addressing this issue in Microsoft Purview | Data Loss Prevention by rolling out new predicates that will enable organizations to set precise policies that trigger alerts or actions when emails exceed a specified number of recipients or domains. This feature is essential for enhancing data security, ensuring compliance, and providing peace of mind to organizations concerned about unauthorized data dissemination.
This message is associated with Microsoft 365 Roadmap ID 483158.
[When this will happen:]
Public Preview: We will begin rolling out late April 2025 and expect to complete by mid-May 2025.
General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out late May 2025 and expect to complete by mid-June 2025.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-03-06

updated:
2025-03-06

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft Purview is introducing a Data Loss Prevention (DLP) feature that allows organizations to set rules for outgoing emails based on the number of recipients or domains, triggering alerts or actions if limits are exceeded, with automatic rollout scheduled for 2025.

Direct effects for Operations**

Data Security Risks
Without preparation, the new predicates may lead to unintentional data leaks if users are unaware of the new policies and exceed the recipient/domain limits, resulting in potential compliance violations.
   - roles: Compliance Officer, IT Administrator
   - references: https://learn.microsoft.com/powershell/module/exchange/new-dlpcompliancerule?view=exchange-ps, https://www.microsoft.com/microsoft-365/roadmap?searchterms=483158

User Experience Disruption
Users may experience disruptions in their email communication if their messages are blocked or flagged due to exceeding the new recipient/domain thresholds, leading to frustration and decreased productivity.
   - roles: End User, IT Support
   - references: https://learn.microsoft.com/powershell/module/exchange/new-dlpcompliancerule?view=exchange-ps, https://www.microsoft.com/microsoft-365/roadmap?searchterms=483158

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only