MC1148526 – Microsoft Purview | Data Loss Prevention – UX improvements to the DLP Alerts in Purview Portal

Product:

Microsoft 365 Apps, Purview Communication Compliance, Purview Data Loss Prevention

Platform:

Online, Web, World tenant

Status:

In development

Change type:

New feature, User impact, Admin impact

Links:

501787

Details:

Summary:
Microsoft Purview Portal's DLP Alerts page now offers a unified, faster view with event details accessible in one click, four new columns for enhanced context, and improved performance. Rollout starts late September 2025, requiring no admin preparation and supporting up to 50 events per alert on the main page.

Details:
[Introduction]
We're excited to announce performance and usability improvements to the DLP Alerts Page in Microsoft Purview Portal to help you triage incidents faster and more efficiently.
🚀 What's New:
Unified View: Events related to each alert are now available directly on the alerts page - no need to switch to new tab or drill down.
Faster Access: Access event details (e.g. Impacted assets) with just one click on the main alerts page itself, compared to four clicks earlier, reducing triage time significantly.
Enhanced Context: We've added four new columns - Location, DLP policy name, DLP rule name, and Rule action to display key alert and event attributes upfront - giving you more visibility at a glance.
Performance Boost: Cache improvements to ensure faster load times and a smoother experience.
These updates are designed to streamline your workflow, reduce response times, and give you the context you need - all in a single, efficient view.
This message is associated with Microsoft 365 Roadmap ID 501787.
[When this will happen:]
Public Preview: We will begin rolling out late September 2025 and expect to complete by early October 2025.
General Availability (Worldwide): We will begin rolling out late October 2025 and expect to complete by early November 2025.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-09-06

updated:
2025-09-06

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

User Experience Improvement
The new unified view and faster access to event details will enhance user experience by reducing the time taken to triage incidents, leading to improved efficiency in handling alerts.
   - roles: Compliance Officer, IT Support Specialist
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=501787

Potential Confusion from Changes
Without preparation, users may be confused by the new layout and features, leading to initial inefficiencies as they adapt to the changes in the DLP Alerts page.
   - roles: Compliance Officer, IT Support Specialist
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=501787

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft has introduced updates to the Data Loss Prevention (DLP) Alerts page in the Purview Portal, aiming to make it easier and quicker for users to manage and respond to incidents. Imagine you're at a library, and previously, to find a specific book, you had to go through several different rooms, each with its own set of shelves. Now, with these updates, it's like having all the books you need on a single shelf right in front of you, organized with clear labels and easy to access.

The updates include a unified view where all events related to an alert are displayed on the same page. This means you no longer have to navigate through multiple pages or tabs to find what you're looking for. It's like having a summary of all the important information on the cover of a book, so you know exactly what to expect inside.

Accessing event details has been simplified from four clicks to just one. Think of it as moving from a multi-step process to simply opening a book to the right page without any hassle. This change significantly reduces the time it takes to understand and act on alerts.

Additionally, four new columns have been added: Location, DLP policy name, DLP rule name, and Rule action. These columns provide key information at a glance, much like having a table of contents that highlights the most important chapters of a book, so you can quickly decide where to focus your attention.

Performance improvements have also been made to ensure faster load times, akin to a library upgrading its catalog system to make finding books quicker and more efficient. This ensures a smoother experience when dealing with alerts.

These changes are being rolled out automatically, so there's no need for any preparation from your side. It's like receiving a library upgrade overnight, with everything ready for you to use the next day. This update aims to streamline your workflow, reduce response times, and provide the context you need in a single, efficient view.