MC1199763 – Microsoft Purview | Data Security Investigations – Introducing new purge mitigation action

Product:

Purview, Purview Communication Compliance, Purview compliance portal

Platform:

Online, Web, World tenant

Status:

In development

Change type:

New feature, Admin impact

Links:

542930

Details:

Summary:
Microsoft Purview Data Security Investigations will add a new purge mitigation action by early 2026, allowing admins to delete sensitive or overshared content during investigations. Enabled by default, it respects existing policies and requires no prior admin action. Security teams should be informed and documentation updated accordingly.

Details:
[Introduction]
We're introducing a new purge mitigation action in Microsoft Purview Data Security Investigations (DSI). This feature enables admins to quickly and efficiently delete sensitive or overshared content during investigations, directly within the product experience. The purge action complements DSI's AI-powered capabilities-such as categorization, AI search, and risk analysis-helping organizations reduce data exposure and mitigate leaks faster.
This message is associated with Microsoft 365 Roadmap ID 542930.
[When this will happen:]
Public Preview: Rollout will begin in early January 2026 and complete by mid-January 2026.
General Availability (Worldwide): Rollout will begin in early March 2026 and complete by late March 2026.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-12-19

updated:
2025-12-19

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft is introducing a "purge" action in its Purview Data Security Investigations tool, allowing administrators to delete sensitive or overly shared content during investigations, with rollout starting in early 2026 and full availability by March.

Direct effects for Operations**

Data Loss Risk
The introduction of a new purge action without prior preparation may lead to accidental deletion of important data, as admins may not be fully aware of the implications of using this feature. This could result in loss of critical information needed for compliance or operational purposes.
   - roles: Admins, Compliance Officers
   - references: https://learn.microsoft.com/purview/data-security-investigations, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=542930

User Trust and Experience
If sensitive or overshared content is deleted without proper communication or training, it may lead to user frustration and a lack of trust in the IT department's ability to manage data security effectively. Users may feel their data is not safe or that they have no control over their information.
   - roles: End Users, IT Support Staff
   - references: https://learn.microsoft.com/purview/data-security-investigations, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=542930

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only