MC1105017 – Microsoft Purview | Data Loss Prevention: Restrict Microsoft 365 Copilot using content with sensitivity labels (archived)

Product:

Copilot, Microsoft 365 Copilot, Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention, Purview Information Protection, SharePoint

Platform:

Online, Web, World tenant

Status:

Launched

Change type:

New feature, Admin impact

Links:

423483

Details:

Summary:
Microsoft Purview Data Loss Prevention (DLP) for Microsoft 365 Copilot is now generally available, allowing organizations to use DLP policies to detect sensitivity labels and restrict access to sensitive content. The rollout begins in late June 2025 and completes by late July 2025. Admins can edit or create new policies and use alerting and simulation features.

Details:
We're introducing General Availability (GA) for Microsoft Purview Data Loss Prevention (DLP) for Microsoft 365 Copilot. This update enhances your organization's data protection capabilities by enabling DLP policies to detect sensitivity labels in enterprise grounding data and restrict access to sensitive content within Microsoft 365 Copilot. With GA, alerting and policy simulation capabilities will also be available.
This message is associated with Microsoft 365 Roadmap ID: 423483.
[When this will happen:]
General Availability (Worldwide): Rollout will begin in late June 2025 and is expected to complete by late July 2025.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-06-28

updated:
2025-06-28

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Data Access Restrictions
Without proper preparation, users may face unexpected restrictions on accessing sensitive content within Microsoft 365 Copilot, leading to workflow disruptions.
   - roles: End Users, Data Analysts
   - references: https://learn.microsoft.com/purview/dlp-learn-about-dlp?view=o365-worldwide, https://learn.microsoft.com/purview/dlp-microsoft365-copilot-location-learn-about

AI Interaction Modifications
Changes in DLP enforcement may alter how AI agents within Microsoft 365 Copilot handle sensitive data, potentially leading to incorrect data processing or content generation.
   - roles: AI Developers, Compliance Officers
   - references: https://learn.microsoft.com/purview/dlp-learn-about-dlp?view=o365-worldwide, https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=423483

Compliance Monitoring Challenges
Admins may struggle to monitor and report compliance effectively due to the introduction of new alerting and simulation features without prior configuration.
   - roles: IT Administrators, Compliance Managers
   - references: https://learn.microsoft.com/purview/dlp-learn-about-dlp?view=o365-worldwide, https://learn.microsoft.com/purview/dlp-microsoft365-copilot-location-learn-about

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Data Protection Capabilities
The integration of DLP policies with Microsoft 365 Copilot allows organizations to enforce sensitivity labels effectively, ensuring that sensitive data is protected when interacting with AI tools. This capability enhances data governance and compliance efforts, making it easier to meet regulatory requirements.
   - next-steps: Conduct a review of existing DLP policies and identify areas where sensitivity labels can be applied. Train admins on configuring new policies and utilizing alerting and simulation features to test effectiveness.
   - roles: Compliance Officers, IT Security Managers, Data Governance Teams
   - references: https://learn.microsoft.com/purview/dlp-learn-about-dlp?view=o365-worldwide, https://learn.microsoft.com/purview/dlp-microsoft365-copilot-location-learn-about

Improved Compliance Monitoring
With the introduction of alerting and simulation features, admins can proactively monitor DLP policy effectiveness and compliance status. This allows for timely adjustments to policies based on real-time data and usage patterns, enhancing overall compliance management.
   - next-steps: Set up alerting features within existing DLP policies and schedule regular reviews to assess compliance status. Develop a reporting framework to analyze alert data and inform stakeholders.
   - roles: Compliance Officers, IT Administrators, Data Protection Officers
   - references: https://learn.microsoft.com/purview/dlp-learn-about-dlp?view=o365-worldwide, https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=423483

Operational Efficiency through Policy Simulation
The ability to simulate DLP policies allows organizations to test the impact of policies before they are fully implemented. This reduces the risk of unintended data access issues and streamlines the policy creation process, leading to more efficient IT operations.
   - next-steps: Develop a simulation strategy to test new DLP policies before deployment. Gather feedback from users during the simulation phase to refine policies for better usability and effectiveness.
   - roles: IT Administrators, Data Analysts, Compliance Officers
   - references: https://learn.microsoft.com/purview/dlp-learn-about-dlp?view=o365-worldwide, https://learn.microsoft.com/purview/dlp-microsoft365-copilot-location-learn-about

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only