MC1108129 – (Updated) Microsoft Purview compliance portal: Enhanced Metadata Scanning for Images in Exchange DLP (archived)

Product:

Exchange, Microsoft 365 suite, Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention

Platform:

Online, Web, World tenant

Status:

Launched

Change type:

Admin impact, New feature, Updated message, User impact

Links:

495459

Details:

Summary:
Microsoft Purview DLP will enhance data protection by scanning sensitive data in image metadata when OCR is unavailable. Rolling out worldwide from mid-July to late September 2025, this feature activates automatically without admin action, expanding DLP coverage and potentially affecting compliance reporting.

Details:
Updated August 13, 2025: We have updated the timeline. Thank you for your patience.
We're enhancing Microsoft Purview Data Loss Prevention (DLP) to improve data protection coverage. With this update, DLP will now scan and classify sensitive data embedded in image metadata when Optical Character Recognition (OCR) is not available. This ensures better detection of sensitive information in scenarios where text is not visible in the image itself.
This message is associated with Microsoft 365 Roadmap ID 495459
[When this will happen:]
General Availability (Worldwide): Rollout will begin in mid-July 2025 and is expected to complete by late September 2025 (previously early August).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-07-03

updated:
2025-08-14

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Data Processing Changes
The automatic scanning of image metadata may lead to unintended exposure of sensitive information if existing DLP policies are not reviewed and updated accordingly, potentially resulting in compliance violations.
   - roles: Compliance Officer, Data Protection Officer
   - references: https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=495459

Compliance Reporting Impact
The change may alter compliance monitoring and reporting visibility, making it difficult to track sensitive data effectively, which could lead to gaps in compliance reporting.
   - roles: Compliance Officer, IT Auditor
   - references: https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=495459

User Experience Disruption
Users may experience delays or issues if sensitive data is flagged incorrectly due to the new scanning feature, leading to potential disruptions in workflow and productivity.
   - roles: End User, IT Support Specialist
   - references: https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=495459

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Data Protection
The new feature of scanning image metadata for sensitive data will significantly improve data protection measures, ensuring that sensitive information is not missed even when OCR is unavailable. This is crucial for compliance with data protection regulations and helps to prevent data breaches.
   - next-steps: Evaluate current DLP policies to align with the new scanning capabilities and ensure that all sensitive data is being adequately protected.
   - roles: Compliance Officer, Data Protection Officer, IT Security Manager
   - references: https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=495459

Improved Compliance Reporting
With the expansion of DLP scanning to include image metadata, organizations will have a more comprehensive view of sensitive data across various formats, leading to improved compliance reporting and risk management.
   - next-steps: Update compliance reporting frameworks to incorporate insights from the new DLP capabilities and ensure that stakeholders are informed about changes in reporting metrics.
   - roles: Compliance Officer, Data Analyst, IT Manager
   - references: https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=495459

Operational Efficiency in DLP Management
The automatic activation of the enhanced scanning feature means that IT teams will spend less time on manual configurations, allowing for a more streamlined DLP management process and reducing administrative overhead.
   - next-steps: Train IT staff on the new capabilities and adjust workflows to maximize efficiency in DLP management and incident response.
   - roles: IT Administrator, Compliance Officer, Risk Manager
   - references: https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=495459

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only