MC1199763 – Microsoft Purview | Data Security Investigations – Introducing new purge mitigation action

Product:

Purview, Purview Communication Compliance, Purview compliance portal

Platform:

Online, Web, World tenant

Status:

In development

Change type:

New feature, Admin impact

Links:

542930

Details:

Summary:
Microsoft Purview Data Security Investigations will add a new purge mitigation action by early 2026, allowing admins to delete sensitive or overshared content during investigations. Enabled by default, it respects existing policies and requires no prior admin action. Security teams should be informed and documentation updated accordingly.

Details:
[Introduction]
We're introducing a new purge mitigation action in Microsoft Purview Data Security Investigations (DSI). This feature enables admins to quickly and efficiently delete sensitive or overshared content during investigations, directly within the product experience. The purge action complements DSI's AI-powered capabilities-such as categorization, AI search, and risk analysis-helping organizations reduce data exposure and mitigate leaks faster.
This message is associated with Microsoft 365 Roadmap ID 542930.
[When this will happen:]
Public Preview: Rollout will begin in early January 2026 and complete by mid-January 2026.
General Availability (Worldwide): Rollout will begin in early March 2026 and complete by late March 2026.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-12-19

updated:
2025-12-19

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Data Loss Risk
The introduction of the purge action without prior preparation may lead to accidental deletion of important data, as admins may not be fully aware of the implications of using this feature.
   - roles: Admins, Compliance Officers
   - references: https://learn.microsoft.com/purview/data-security-investigations, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=542930

User Trust and Experience
Users may experience a decline in trust towards the data management processes if sensitive data is deleted without proper communication or understanding of the new purge action, leading to potential dissatisfaction.
   - roles: End Users, Data Protection Officers
   - references: https://learn.microsoft.com/purview/data-security-investigations, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=542930

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft is introducing a new feature in its Purview Data Security Investigations tool that will allow administrators to delete sensitive or overshared content during investigations. Think of this feature like a digital cleanup crew that helps keep your data environment tidy and secure. Just as you might quickly remove sensitive documents from a desk to prevent them from being seen by unauthorized eyes, this new purge action allows admins to do the same with digital content.

This feature will be available by early 2026 and will be automatically enabled, meaning admins don't need to take any initial steps to set it up. It works alongside existing policies and tools, much like adding a new tool to your toolbox that complements the ones you already have. The purge action is designed to help organizations reduce the risk of data leaks by allowing for the swift removal of potentially harmful information.

Security and compliance teams should be informed about this new capability so they can update their processes and documentation accordingly. The goal is to ensure that everyone involved in data security is aware of this new tool and how it can be used effectively to protect sensitive information.