MC1056265 – (Updated) Microsoft Purview: New data security controls for detecting sensitive data shared over the network (archived)

Product:

Microsoft 365 Apps, Microsoft 365 suite, Purview, Purview Communication Compliance, Purview compliance portal, Purview Information Protection, Purview Insider Risk Management, SharePoint

Platform:

Online, Web, World tenant

Status:

Launched

Change type:

Admin impact, New feature, Updated message, User impact

Links:

488807

Details:

Summary:
Microsoft Purview now detects sensitive data shared over networks, integrating with Secure Access Service Edge (SASE)/Security Service Edge (SSE) solutions to inspect traffic and identify data sent to unmanaged cloud apps. Admins can create granular policies and manage them centrally via the Purview portal. Activation and configuration by admins are required.

Details:
Updated November 12, 2025: We have completed rollout of this feature. Thank you!

Coming soon: You will be able to extend Microsoft Purview to the network layer by integrating Purview with your preferred Secure Access Service Edge (SASE) / Security Service Edge (SSE) solution. Through this integration, admins can intercept and inspect traffic flowing through the network layer to identify the presence of sensitive data. This enables admins to detect sensitive data shared with untrusted cloud applications through browsers, applications, APIs, add-ins, and more, including common generative AI, cloud storage, and content sharing services. The signals from inline discovery for the network further enrich Purview solutions including Data Security Posture Management (DSPM) and Insider Risk Management (IRM), helping admins better understand how to reduce data exfiltration risks to locations outside of their organization. Learn more: Building layered protection: New Microsoft Purview data security controls for the browser & network | Microsoft Community Hub (March 24, 2025).
This message is associated with Microsoft 365 Roadmap ID 488807.
[When this will happen:]
Public Preview: We will begin rolling out early May 2025 and expect to complete by late May 2025.
General Availability (Worldwide): Now available.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-04-16

updated:
2025-11-14

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft Purview's new data security controls now allow for monitoring network traffic, integrating with solutions like SASE or SSE to inspect data movement across networks, enabling administrators to set up policies to detect inappropriate sharing of sensitive information.

Direct effects for Operations**

Data Security Policy Activation
Without proper preparation, sensitive data may be shared without detection, leading to potential data breaches and compliance violations.
   - roles: Data Security Admin, Compliance Admin
   - references: https://techcommunity.microsoft.com/blog/microsoft-security-blog/building-layered-protection-new-microsoft-purview-data-security-controls-for-the/4395071, https://www.microsoft.com/microsoft-365/roadmap?searchterms=488807

User Awareness and Training
Users may inadvertently share sensitive data with unmanaged applications, resulting in security risks and user confusion regarding data handling policies.
   - roles: End User, IT Support
   - references: https://techcommunity.microsoft.com/blog/microsoft-security-blog/building-layered-protection-new-microsoft-purview-data-security-controls-for-the/4395071, https://www.microsoft.com/microsoft-365/roadmap?searchterms=488807

Integration with SASE/SSE Solutions
Failure to integrate with SASE/SSE solutions may lead to incomplete data visibility and inability to enforce data loss prevention (DLP) policies effectively.
   - roles: Network Admin, Data Security Admin
   - references: https://techcommunity.microsoft.com/blog/microsoft-security-blog/building-layered-protection-new-microsoft-purview-data-security-controls-for-the/4395071, https://www.microsoft.com/microsoft-365/roadmap?searchterms=488807

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only