check before: 2025-11-15
Product:
Copilot, Copilot Chat, Entra, Microsoft 365 admin center, Microsoft 365 Copilot, Purview, Purview Communication Compliance, Purview Data Loss Prevention
Platform:
Online, Web, World tenant
Status:
Change type:
New feature, Admin impact
Links:
Details:
Summary:
Microsoft Purview introduces new Copilot security controls in Microsoft Admin Center, enabling admins to create DLP policies, monitor oversharing risks, and protect sensitive data in Copilot. Public preview starts November 2025; general availability in January 2026. Admin roles required for policy management and compliance.
Details:
[Introduction]
To help organizations adopt Microsoft 365 Copilot securely, Microsoft Purview is introducing new capabilities in Microsoft Admin Center. These enhancements allow AI and IT admins to gain visibility into oversharing risks, remediate issues, and apply a new Data Loss Prevention (DLP) policy directly within Microsoft Admin Center. This update supports secure usage of Copilot by enabling protection of sensitive interactions.
This message is associated with Microsoft 365 Roadmap ID 523212.
[When this will happen:]
Public Preview: We will begin rolling out mid-November 2025 and expect to complete by late November 2025.
General Availability (Worldwide): We will begin rolling out mid-January 2026 and expect to complete by late January 2026.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-11-04
updated:
2025-11-04
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
Pictures
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Data Loss Prevention Policy Implementation
Without proper preparation, the implementation of new DLP policies may lead to unintentional blocking of legitimate data usage in Copilot, causing disruptions in workflows.
- roles: AI Admin, Data Security Admin
- references: https://learn.microsoft.com/purview/ai-m365-copilot, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=523212
Oversharing Risk Visibility
Lack of preparation may result in admins being unprepared to address oversharing risks, leading to potential data breaches and compliance issues.
- roles: AI Admin, Global Admin
- references: https://learn.microsoft.com/purview/ai-m365-copilot, https://learn.microsoft.com/entra/identity/role-based-access-control/permissions-reference#global-administrator
Compliance with AI Regulations
Failure to implement the new security controls may lead to non-compliance with AI regulations, risking legal repercussions and damage to the organization's reputation.
- roles: Data Security Admin, Compliance Officer
- references: https://learn.microsoft.com/purview/ai-m365-copilot, https://learn.microsoft.com/entra/identity/role-based-access-control/permissions-reference#ai-administrator
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
Enhanced Data Loss Prevention (DLP) Policies
The introduction of new DLP policies in Microsoft Admin Center allows organizations to better protect sensitive information from being shared inadvertently through Copilot. This enhancement can significantly reduce the risk of data breaches and ensure compliance with data protection regulations.
- next-steps: Identify sensitive information types relevant to your organization, train IT admins on the new DLP policy creation process, and establish a monitoring framework for compliance.
- roles: IT Admins, Compliance Officers, Data Security Officers
- references: https://learn.microsoft.com/purview/ai-m365-copilot, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=523212
Visibility into Oversharing Risks
With the new security controls, admins will gain insights into potential oversharing of sensitive data. This visibility can help organizations proactively address risks and enhance their data governance strategies.
- next-steps: Set up regular reporting on oversharing incidents, conduct training sessions for users on data handling best practices, and implement corrective measures based on insights gained.
- roles: Data Governance Officers, IT Admins, Compliance Officers
- references: https://learn.microsoft.com/purview/ai-m365-copilot, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=523212
Streamlined Compliance Management
The integration of DLP policies directly within the Microsoft Admin Center simplifies the compliance management process for IT admins. This can lead to more efficient workflows and reduced administrative overhead.
- next-steps: Review existing compliance frameworks, train IT staff on the new features, and integrate the DLP policy management into regular compliance audits.
- roles: Compliance Officers, IT Admins, Risk Management Officers
- references: https://learn.microsoft.com/purview/ai-m365-copilot, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=523212
Potentional Risks**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
Hypothetical Work Council Statement**
XXXXXXX ... paid membership only
DPIA Draft**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
