check before: 2025-12-30
Product:
Purview, Purview Data Loss Prevention, Teams
Platform:
Online, World tenant
Status:
Change type:
Admin impact, Feature update, Updated message
Links:
Details:
Summary:
Microsoft is updating the sender email address for Teams Data Loss Prevention Generate Incident Report emails. Starting June 2, 2025, emails will come from either the old or new address, switching fully to no-reply@teams.mail.microsoft.com by June 20, 2025. Organizations should adjust related systems accordingly.
Details:
Updated September 4, 2025: We have updated the timeline. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on December 30, 2025 (previously August 20) and complete by January 30, 2025 (previously August 30).
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-04-29
updated:
2025-09-05
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Change in Sender Email Address
The change in sender email address may lead to confusion among users who are accustomed to the old address, potentially causing missed incident reports or miscommunication regarding data loss incidents.
- roles: IT Administrators, Compliance Officers
- references: https://learn.microsoft.com/purview/dlp-microsoft-teams
Integration with Downstream Systems
If organizations have automated systems or workflows that rely on the old sender email address, these may fail to function correctly, leading to disruptions in incident reporting and response processes.
- roles: IT Administrators, Security Analysts
- references: https://learn.microsoft.com/purview/dlp-microsoft-teams
User Experience Impact
Users may experience delays in receiving important incident reports, which can hinder timely responses to data loss incidents, affecting overall organizational compliance and security posture.
- roles: End Users, Compliance Officers
- references: https://learn.microsoft.com/purview/dlp-microsoft-teams
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
Email Notification Management Improvement
The change in sender email address for Teams DLP GIR emails presents an opportunity to enhance the management of email notifications. By updating downstream systems to recognize the new sender address, organizations can improve the reliability of incident reporting and ensure that alerts are not missed due to filtering or misclassification of emails.
- next-steps: Conduct an audit of existing systems that rely on the current sender address and create a migration plan to update these systems to recognize the new sender address. Schedule training for IT staff on managing these updates.
- roles: IT Administrators, Compliance Officers, Security Analysts
- references: https://learn.microsoft.com/purview/dlp-microsoft-teams
Enhanced User Awareness and Training
With the change in sender email address, there is an opportunity to enhance user awareness and training around Data Loss Prevention (DLP) protocols. Educating users on the significance of these emails and how to respond can lead to better compliance and security practices within the organization.
- next-steps: Develop a training module that covers the importance of DLP emails, the changes to the sender address, and best practices for responding to incidents. Schedule training sessions for all relevant staff.
- roles: Compliance Officers, HR Trainers, IT Support
- references: https://learn.microsoft.com/purview/dlp-microsoft-teams
Streamlined Incident Response Process
The transition to a new sender email address can be leveraged to review and streamline the incident response process associated with DLP alerts. By ensuring that the new emails are properly integrated into incident response workflows, organizations can reduce response times and improve overall incident management.
- next-steps: Review current incident response workflows and identify areas for improvement. Update processes to include the new sender address and ensure that all team members are aware of the changes.
- roles: Security Analysts, Incident Response Teams, IT Managers
- references: https://learn.microsoft.com/purview/dlp-microsoft-teams
Potentional Risks**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
Hypothetical Work Council Statement**
XXXXXXX ... paid membership only
DPIA Draft**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2025-09-05 | MC Last Updated | 06/24/2025 16:46:20 | 2025-09-04T22:23:04Z |
| 2025-09-05 | MC Messages | Updated June 24, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails. [When this will happen:] This rollout will start on August 20, 2025 (previously June 2) and complete by August 30, 2025 (previously June 20). | Updated September 4, 2025: We have updated the timeline. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails. [When this will happen:] This rollout will start on December 30, 2025 (previously August 20) and complete by January 30, 2025 (previously August 30). |
| 2025-09-05 | MC End Time | 10/06/2025 09:00:00 | 2026-02-02T08:00:00Z |
| 2025-09-05 | MC Summary | Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The rollout will now start on August 20, 2025, and complete by August 30, 2025. After this period, all such emails will be sent from <no-reply@teams.mail.microsoft.com>. | Microsoft is updating the sender email address for Teams Data Loss Prevention Generate Incident Report emails. Starting June 2, 2025, emails will come from either the old or new address, switching fully to no-reply@teams.mail.microsoft.com by June 20, 2025. Organizations should adjust related systems accordingly. |
| 2025-06-25 | MC Last Updated | 05/19/2025 15:32:07 | 2025-06-24T16:46:20Z |
| 2025-06-25 | MC Messages | Updated May 19, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails. [When this will happen:] This rollout will start on June 2, 2025 (previously May 19th) and complete by June 20, 2025 (previously June 6) | Updated June 24, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails. [When this will happen:] This rollout will start on August 20, 2025 (previously June 2) and complete by August 30, 2025 (previously June 20). |
| 2025-06-25 | MC End Time | 08/04/2025 09:00:00 | 2025-10-06T09:00:00Z |
| 2025-06-25 | MC Summary | Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The rollout will start on June 2, 2025, and complete by June 20, 2025. After June 20, all emails will be sent from no-reply@teams.mail.microsoft.com. Adjust downstream systems accordingly. | Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The rollout will now start on August 20, 2025, and complete by August 30, 2025. After this period, all such emails will be sent from <no-reply@teams.mail.microsoft.com>. |
| 2025-05-20 | MC prepare | You will continue to receive Teams DLP GIR emails, but the sender email address will change. When this change takes effect, you will need to manage the downstream systems that you have configured (if any) by using the previous sender email address.
Learn more: Data loss prevention and Microsoft Teams. | You will continue to receive Teams DLP GIR emails, but the sender email address will change. When this change takes effect, you will need to manage the downstream systems that you have configured (if any) by using the previous sender email address.
Learn more: Data loss prevention and Microsoft Teams. https://learn.microsoft.com/purview/dlp-microsoft-teams |
| 2025-05-20 | MC Summary | Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. From May 19th to June 6th, 2025, emails will transition from <no-reply-MicrosoftInformationProtectionOnline@microsoft.com> to <no-reply@teams.mail.microsoft.com>. Organizations must update their systems accordingly. Learn more [here](https://learn.microsoft.com/purview/dlp-microsoft-teams). | Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The rollout will start on June 2, 2025, and complete by June 20, 2025. After June 20, all emails will be sent from no-reply@teams.mail.microsoft.com. Adjust downstream systems accordingly. |
| 2025-05-20 | MC Last Updated | 05/14/2025 15:38:30 | 2025-05-19T15:32:07Z |
| 2025-05-20 | MC Messages | Updated May 14, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails. [When this will happen:] This rollout will start on May 19th, 2025, and end on June 6th, 2025. | Updated May 19, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails. [When this will happen:] This rollout will start on June 2, 2025 (previously May 19th) and complete by June 20, 2025 (previously June 6) |
| 2025-05-20 | MC End Time | 07/14/2025 09:00:00 | 2025-08-04T09:00:00Z |
| 2025-05-20 | MC How Affect | You are receiving this message because our reporting indicates one or more users in your organization may be using this GIR email functionality available with Teams DLP.
Currently, Teams DLP GIR emails are sent out via <no-reply-MicrosoftInformationProtectionOnline@microsoft.com>. Starting May 12th 2025 (for a period of 2 weeks), you will receive GIR emails from either <no-reply-MicrosoftInformationProtectionOnline@microsoft.com> or <no-reply@teams.mail.microsoft.com>. After May 26th 2025, all Teams DLP GIR emails will be sent by the <no-reply@teams.mail.microsoft.com> email address. | You are receiving this message because our reporting indicates one or more users in your organization may be using this GIR email functionality available with Teams DLP.
Currently, Teams DLP GIR emails are sent out via <no-reply-MicrosoftInformationProtectionOnline@microsoft.com>.Starting June 2nd 2025 (for a period of 2 weeks), you will receive GIR emails from either <no-reply-MicrosoftInformationProtectionOnline@microsoft.com> or <no-reply@teams.mail.microsoft.com>. After June 20th 2025, all Teams DLP GIR emails will be sent by the <no-reply@teams.mail.microsoft.com> email address. |
| 2025-05-15 | MC Last Updated | 04/29/2025 03:18:04 | 2025-05-14T15:38:30Z |
| 2025-05-15 | MC Messages | We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:] This rollout will start on May 12th, 2025, and end on June 6th, 2025. | Updated May 14, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails. [When this will happen:] This rollout will start on May 19th, 2025, and end on June 6th, 2025. |
| 2025-05-15 | MC Summary | Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The change will occur from May 12th, 2025, to June 6th, 2025. After May 26th, 2025, all emails will come from no-reply@teams.mail.microsoft.com. Adjust any systems using the old address accordingly. | Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. From May 19th to June 6th, 2025, emails will transition from <no-reply-MicrosoftInformationProtectionOnline@microsoft.com> to <no-reply@teams.mail.microsoft.com>. Organizations must update their systems accordingly. Learn more [here](https://learn.microsoft.com/purview/dlp-microsoft-teams). |
| 2025-05-15 | MC MessageTagNames | Feature update, Admin impact | Updated message, Feature update, Admin impact |
| 2025-05-15 | MC prepare | You will continue to receive Teams DLP GIR emails, but the sender email address will change. When this change takes effect, you will need to manage the downstream systems that you have configured (if any) by using the previous sender email address.
Learn more: Data loss prevention and Microsoft Teams. https://learn.microsoft.com/purview/dlp-microsoft-teams | You will continue to receive Teams DLP GIR emails, but the sender email address will change. When this change takes effect, you will need to manage the downstream systems that you have configured (if any) by using the previous sender email address.
Learn more: Data loss prevention and Microsoft Teams. |
Last updated 2 days ago ago