MC1064354 – Microsoft Purview: Sender email address update for Microsoft Teams Data Loss Prevention Generate Incident Report emails

Microsoft Teams logo

check before: 2025-12-30

Product:

Purview, Purview Data Loss Prevention, Teams

Platform:

Online, World tenant

Status:

Change type:

Admin impact, Feature update, Updated message

Links:

Details:

Summary:
Microsoft is updating the sender email address for Teams Data Loss Prevention Generate Incident Report emails. Starting June 2, 2025, emails will come from either the old or new address, switching fully to no-reply@teams.mail.microsoft.com by June 20, 2025. Organizations should adjust related systems accordingly.

Details:
Updated September 4, 2025: We have updated the timeline. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on December 30, 2025 (previously August 20) and complete by January 30, 2025 (previously August 30).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-04-29

updated:
2025-09-05

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Change in Sender Email Address
The change in sender email address may lead to confusion among users who are accustomed to the old address, potentially causing missed incident reports or miscommunication regarding data loss incidents.
   - roles: IT Administrators, Compliance Officers
   - references: https://learn.microsoft.com/purview/dlp-microsoft-teams

Integration with Downstream Systems
If organizations have automated systems or workflows that rely on the old sender email address, these may fail to function correctly, leading to disruptions in incident reporting and response processes.
   - roles: IT Administrators, Security Analysts
   - references: https://learn.microsoft.com/purview/dlp-microsoft-teams

User Experience Impact
Users may experience delays in receiving important incident reports, which can hinder timely responses to data loss incidents, affecting overall organizational compliance and security posture.
   - roles: End Users, Compliance Officers
   - references: https://learn.microsoft.com/purview/dlp-microsoft-teams

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Email Notification Management Improvement
The change in sender email address for Teams DLP GIR emails presents an opportunity to enhance the management of email notifications. By updating downstream systems to recognize the new sender address, organizations can improve the reliability of incident reporting and ensure that alerts are not missed due to filtering or misclassification of emails.
   - next-steps: Conduct an audit of existing systems that rely on the current sender address and create a migration plan to update these systems to recognize the new sender address. Schedule training for IT staff on managing these updates.
   - roles: IT Administrators, Compliance Officers, Security Analysts
   - references: https://learn.microsoft.com/purview/dlp-microsoft-teams

Enhanced User Awareness and Training
With the change in sender email address, there is an opportunity to enhance user awareness and training around Data Loss Prevention (DLP) protocols. Educating users on the significance of these emails and how to respond can lead to better compliance and security practices within the organization.
   - next-steps: Develop a training module that covers the importance of DLP emails, the changes to the sender address, and best practices for responding to incidents. Schedule training sessions for all relevant staff.
   - roles: Compliance Officers, HR Trainers, IT Support
   - references: https://learn.microsoft.com/purview/dlp-microsoft-teams

Streamlined Incident Response Process
The transition to a new sender email address can be leveraged to review and streamline the incident response process associated with DLP alerts. By ensuring that the new emails are properly integrated into incident response workflows, organizations can reduce response times and improve overall incident management.
   - next-steps: Review current incident response workflows and identify areas for improvement. Update processes to include the new sender address and ensure that all team members are aware of the changes.
   - roles: Security Analysts, Incident Response Teams, IT Managers
   - references: https://learn.microsoft.com/purview/dlp-microsoft-teams

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



change history

DatePropertyoldnew
2025-09-05MC Last Updated06/24/2025 16:46:202025-09-04T22:23:04Z
2025-09-05MC MessagesUpdated June 24, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on August 20, 2025 (previously June 2) and complete by August 30, 2025 (previously June 20).
Updated September 4, 2025: We have updated the timeline. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on December 30, 2025 (previously August 20) and complete by January 30, 2025 (previously August 30).
2025-09-05MC End Time10/06/2025 09:00:002026-02-02T08:00:00Z
2025-09-05MC SummaryMicrosoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The rollout will now start on August 20, 2025, and complete by August 30, 2025. After this period, all such emails will be sent from <no-reply@teams.mail.microsoft.com>.Microsoft is updating the sender email address for Teams Data Loss Prevention Generate Incident Report emails. Starting June 2, 2025, emails will come from either the old or new address, switching fully to no-reply@teams.mail.microsoft.com by June 20, 2025. Organizations should adjust related systems accordingly.
2025-06-25MC Last Updated05/19/2025 15:32:072025-06-24T16:46:20Z
2025-06-25MC MessagesUpdated May 19, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on June 2, 2025 (previously May 19th) and complete by June 20, 2025 (previously June 6)
Updated June 24, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on August 20, 2025 (previously June 2) and complete by August 30, 2025 (previously June 20).
2025-06-25MC End Time08/04/2025 09:00:002025-10-06T09:00:00Z
2025-06-25MC SummaryMicrosoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The rollout will start on June 2, 2025, and complete by June 20, 2025. After June 20, all emails will be sent from no-reply@teams.mail.microsoft.com. Adjust downstream systems accordingly.Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The rollout will now start on August 20, 2025, and complete by August 30, 2025. After this period, all such emails will be sent from <no-reply@teams.mail.microsoft.com>.
2025-05-20MC prepareYou will continue to receive Teams DLP GIR emails, but the sender email address will change. When this change takes effect, you will need to manage the downstream systems that you have configured (if any) by using the previous sender email address.
Learn more: Data loss prevention and Microsoft Teams.
You will continue to receive Teams DLP GIR emails, but the sender email address will change. When this change takes effect, you will need to manage the downstream systems that you have configured (if any) by using the previous sender email address.
Learn more: Data loss prevention and Microsoft Teams.
https://learn.microsoft.com/purview/dlp-microsoft-teams
2025-05-20MC SummaryMicrosoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. From May 19th to June 6th, 2025, emails will transition from <no-reply-MicrosoftInformationProtectionOnline@microsoft.com> to <no-reply@teams.mail.microsoft.com>. Organizations must update their systems accordingly. Learn more [here](https://learn.microsoft.com/purview/dlp-microsoft-teams).Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The rollout will start on June 2, 2025, and complete by June 20, 2025. After June 20, all emails will be sent from no-reply@teams.mail.microsoft.com. Adjust downstream systems accordingly.
2025-05-20MC Last Updated05/14/2025 15:38:302025-05-19T15:32:07Z
2025-05-20MC MessagesUpdated May 14, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on May 19th, 2025, and end on June 6th, 2025.
Updated May 19, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on June 2, 2025 (previously May 19th) and complete by June 20, 2025 (previously June 6)
2025-05-20MC End Time07/14/2025 09:00:002025-08-04T09:00:00Z
2025-05-20MC How AffectYou are receiving this message because our reporting indicates one or more users in your organization may be using this GIR email functionality available with Teams DLP.
Currently, Teams DLP GIR emails are sent out via <no-reply-MicrosoftInformationProtectionOnline@microsoft.com>. Starting May 12th 2025 (for a period of 2 weeks), you will receive GIR emails from either <no-reply-MicrosoftInformationProtectionOnline@microsoft.com> or <no-reply@teams.mail.microsoft.com>. After May 26th 2025, all Teams DLP GIR emails will be sent by the <no-reply@teams.mail.microsoft.com> email address.
You are receiving this message because our reporting indicates one or more users in your organization may be using this GIR email functionality available with Teams DLP.
Currently, Teams DLP GIR emails are sent out via <no-reply-MicrosoftInformationProtectionOnline@microsoft.com>.Starting June 2nd 2025 (for a period of 2 weeks), you will receive GIR emails from either <no-reply-MicrosoftInformationProtectionOnline@microsoft.com> or <no-reply@teams.mail.microsoft.com>. After June 20th 2025, all Teams DLP GIR emails will be sent by the <no-reply@teams.mail.microsoft.com> email address.
2025-05-15MC Last Updated04/29/2025 03:18:042025-05-14T15:38:30Z
2025-05-15MC MessagesWe're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on May 12th, 2025, and end on June 6th, 2025.
Updated May 14, 2025: We have updated the timeline below. Thank you for your patience.
We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.
[When this will happen:]
This rollout will start on May 19th, 2025, and end on June 6th, 2025.
2025-05-15MC SummaryMicrosoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. The change will occur from May 12th, 2025, to June 6th, 2025. After May 26th, 2025, all emails will come from no-reply@teams.mail.microsoft.com. Adjust any systems using the old address accordingly.Microsoft is updating the sender email addresses for Teams Data Loss Prevention Generate Incident Report emails. From May 19th to June 6th, 2025, emails will transition from <no-reply-MicrosoftInformationProtectionOnline@microsoft.com> to <no-reply@teams.mail.microsoft.com>. Organizations must update their systems accordingly. Learn more [here](https://learn.microsoft.com/purview/dlp-microsoft-teams).
2025-05-15MC MessageTagNamesFeature update, Admin impactUpdated message, Feature update, Admin impact
2025-05-15MC prepareYou will continue to receive Teams DLP GIR emails, but the sender email address will change. When this change takes effect, you will need to manage the downstream systems that you have configured (if any) by using the previous sender email address.
Learn more: Data loss prevention and Microsoft Teams.
https://learn.microsoft.com/purview/dlp-microsoft-teams
You will continue to receive Teams DLP GIR emails, but the sender email address will change. When this change takes effect, you will need to manage the downstream systems that you have configured (if any) by using the previous sender email address.
Learn more: Data loss prevention and Microsoft Teams.

Last updated 2 days ago ago

Leave a Reply

Share to MS Teams

Login to your account

Welcome Back, We Missed You!