MC1182684 – (Update)Microsoft Purview DLP and Edge for Business: Inline data security controls for more unmanaged GenAI apps in Edge

Product:

Intune, Microsoft Edge, Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention, Windows

Platform:

Online, Web, World tenant

Status:

In development

Change type:

Admin impact, New feature, Updated message, User impact

Links:

518643

Details:

Summary:
Microsoft Purview DLP in Edge for Business will expand inline protections to cover more unmanaged consumer GenAI apps, allowing admins to apply existing policies without extra deployment. Public preview starts late November 2025; general availability begins mid-January 2026. This enhances data security and compliance monitoring on Intune-managed Windows devices.

Details:
Updated December 15, 2025: We have updated the timeline. Thank you for your patience.
[Introduction:]
We are expanding inline protections for uploads in Microsoft Edge for Business to cover more unmanaged consumer generative AI (GenAI) apps. With this update, admins can apply Microsoft Purview collection policies and Purview Data Loss Prevention (DLP) policies to detect and prevent sensitive data sharing in the Edge browser when users interact with these additional unmanaged app locations. Inline protections are built directly into Edge for Business and work for users on Intune-managed Windows devices. This enhancement complements existing capabilities, giving organizations greater flexibility to enforce data security controls across a broader set of GenAI apps.
This message is associated with Microsoft 365 Roadmap ID 518643.
[When this will happen:]
Public Preview: Begins late November 2025 (previously mid-November), expected to complete by early December 2025.
General Availability (Worldwide): Begins in mid-January 2026 (previously early December 2025) and is expected to complete by end of January 2026 (previously mid-December 2025).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-11-04

updated:
2025-12-18

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Data Loss Prevention Policy Changes
The update expands DLP enforcement, potentially leading to unintended blocking of legitimate user activities if not properly communicated or prepared for.
   - roles: Admins, End Users
   - references: https://learn.microsoft.com/purview/dlp-policy-reference, https://learn.microsoft.com/purview/dlp-browser-dlp-learn

User Experience Disruption
Automated behaviors may block users from accessing unmanaged GenAI apps, causing frustration and hindering productivity if users are not informed beforehand.
   - roles: End Users, IT Support
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=518643, https://learn.microsoft.com/purview/collection-policies-policy-reference#cloud-apps-detection

Compliance Monitoring Changes
Admins may face challenges in monitoring and reporting compliance activities due to the expanded scope of DLP policies, leading to potential oversight if not adequately prepared.
   - roles: Admins, Compliance Officers
   - references: https://learn.microsoft.com/purview/dlp-policy-reference, https://learn.microsoft.com/purview/dlp-browser-dlp-learn

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Data Security Monitoring
With the expansion of inline protections for unmanaged GenAI apps, organizations can significantly enhance their data security monitoring capabilities. This will allow admins to enforce existing DLP policies across a broader range of applications, ensuring that sensitive data is not shared inappropriately.
   - next-steps: Review and update current DLP policies to include the new unmanaged GenAI app locations. Conduct training sessions for admins to familiarize them with the updated capabilities and monitoring tools.
   - roles: IT Administrators, Compliance Officers, Data Protection Officers
   - references: https://learn.microsoft.com/purview/dlp-browser-dlp-learn" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/dlp-browser-dlp-learn, https://learn.microsoft.com/purview/dlp-policy-reference " target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/dlp-policy-reference

Streamlined Compliance Reporting
The update provides admins with expanded visibility and control over data sharing activities, enabling more comprehensive reporting and compliance oversight. This can lead to improved compliance with regulatory requirements and internal policies.
   - next-steps: Utilize the enhanced reporting features to generate compliance reports. Set up regular audits to assess adherence to DLP policies and identify areas for improvement.
   - roles: Compliance Officers, IT Administrators, Risk Management Teams
   - references: https://learn.microsoft.com/purview/collection-policies-policy-reference#cloud-apps-detection, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=518643

Cost-Effective Policy Management
By allowing existing DLP policies to be applied without additional deployment steps, organizations can save on operational costs associated with policy management and deployment of new tools. This reduces the need for extensive training and resource allocation.
   - next-steps: Analyze current policy management processes to identify potential cost savings. Consider consolidating tools and resources where possible to maximize efficiency and minimize costs.
   - roles: IT Administrators, Finance Officers, Operations Managers
   - references: https://learn.microsoft.com/purview/dlp-policy-reference, https://learn.microsoft.com/purview/dlp-browser-dlp-learn" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/dlp-browser-dlp-learn

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft is making it easier for businesses to protect sensitive information when employees use certain apps on the internet. Imagine you have a special security guard who checks every letter or package you send out of your office to make sure nothing confidential is being shared without permission. This is similar to what Microsoft Purview Data Loss Prevention (DLP) does for digital information.

With the new update, Microsoft is expanding the capabilities of this digital security guard. Previously, it could only check certain areas, but now it can also monitor more places where employees might use generative AI apps that aren't directly managed by the company. This means if someone tries to share sensitive data through these apps using the Microsoft Edge browser on a company-managed device, the system can step in to prevent it.

For managers and HR staff, think of it like having an extra layer of security that automatically watches over the digital communication channels employees use, without needing to install anything new. It's like upgrading the office security system to cover more exits without having to call in a technician to change the wiring.

This change will be available for testing in late November 2025 and should be fully operational by mid-January 2026. It's designed to give businesses more control over how information is shared, ensuring compliance with data protection policies without adding extra work for IT departments. This means businesses can better protect their data and meet compliance requirements with less hassle.