MC1217155 – Data Security Posture Agent is now available in preview

Product:

Copilot, Entra, Purview, Purview Communication Compliance, Purview compliance portal

Platform:

Online, Web, World tenant

Status:

In development

Change type:

New feature, Admin impact

Links:

542188

Details:

Summary:
The Data Security Posture Agent, launching in public preview December 2025, uses large language models to discover sensitive data and assess risks beyond keyword analysis. Available in Microsoft Purview, it offers GenAI summaries, actionable recommendations, and requires admin setup for data security management.

Details:
[Introduction]
We're introducing the Data Security Posture Agent, available in public preview December 24, 2025. This agent helps data security admins proactively discover sensitive data across your organization's data estate and assess associated risks. By leveraging large language models (LLMs), it goes beyond traditional keyword-based analysis to understand the purpose and context of content, enabling more accurate risk identification and actionable insights.
This message is associated with Roadmap ID 542188.
[When this will happen:]
Public Preview (Worldwide): Rollout begins mid-December 2025 and completes by late December 2026.
General Availability (Worldwide): Rollout begins mid-March 2026 and completes by late March 2026.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2026-01-13

updated:
2026-01-13

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Inadequate Admin Preparation
If the Data Security Posture Agent is implemented without proper admin setup, it may lead to misconfiguration, resulting in sensitive data not being adequately protected or identified.
   - roles: Data Security Admin, Compliance Officer
   - references: https://learn.microsoft.com/purview/copilot-in-purview-agents-overview, https://www.microsoft.com/microsoft-365/roadmap?searchterms=542188

User Experience Disruption
Without prior communication and training, users may face confusion or disruption in their workflows due to the new data discovery processes and risk assessments introduced by the agent.
   - roles: End Users, Data Analysts
   - references: https://learn.microsoft.com/purview/copilot-in-purview-agents-overview, https://www.microsoft.com/microsoft-365/roadmap?searchterms=542188

Compliance Risks
Failure to review and update data security policies in light of the new agent could lead to compliance violations, as sensitive data may not be properly managed or reported.
   - roles: Compliance Officer, Data Security Admin
   - references: https://learn.microsoft.com/purview/copilot-in-purview-agents-overview, https://www.microsoft.com/microsoft-365/roadmap?searchterms=542188

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Data Discovery and Risk Assessment
The Data Security Posture Agent utilizes large language models to provide a deeper understanding of sensitive data by analyzing context and intent, not just keywords. This capability can lead to more effective identification of data risks, allowing for better compliance and security posture.
   - next-steps: Integrate the Data Security Posture Agent into existing data management workflows. Train data security admins on how to leverage the agent's capabilities for improved risk assessment and reporting.
   - roles: Data Security Admins, Compliance Officers, IT Security Managers
   - references: https://learn.microsoft.com/purview/copilot-in-purview-agents-overview, https://www.microsoft.com/microsoft-365/roadmap?searchterms=542188

Actionable Recommendations for Security Improvements
The agent provides GenAI-generated summaries and actionable recommendations based on the assessment of sensitive data. This can help organizations proactively address vulnerabilities and enhance their data security strategies.
   - next-steps: Establish a regular review process for the actionable recommendations provided by the agent. Create a feedback loop for data security admins to implement changes based on these insights.
   - roles: Data Security Admins, IT Managers, Risk Management Teams
   - references: https://learn.microsoft.com/purview/copilot-in-purview-agents-overview, https://www.microsoft.com/microsoft-365/roadmap?searchterms=542188

Streamlined Compliance Management
By automating the discovery and risk assessment of sensitive data, the Data Security Posture Agent can significantly reduce the manual effort required for compliance audits and reporting, leading to improved efficiency in compliance management.
   - next-steps: Assess current compliance processes and identify areas where the agent can automate tasks. Train compliance teams on utilizing the agent for audit preparation and reporting.
   - roles: Compliance Officers, Data Protection Officers, IT Compliance Managers
   - references: https://learn.microsoft.com/purview/copilot-in-purview-agents-overview, https://www.microsoft.com/microsoft-365/roadmap?searchterms=542188

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

The Data Security Posture Agent is a new tool that will soon be available for those managing data security within Microsoft Purview. Think of it like a highly skilled detective who doesn't just look for specific words or phrases but understands the whole story behind the information. This detective uses advanced technology, called large language models, to find sensitive data and assess risks in a way that's more sophisticated than just searching for keywords.

Imagine you have a library filled with books, emails, and documents. Traditional methods would be like searching for specific words in each book to find out what it's about. However, this new agent is like having a librarian who reads and understands the content, providing you with a summary and recommendations based on the overall context and intent of the information.

For those in charge of data security, this means the agent can help identify potential risks by understanding the purpose and context of the data, not just by spotting certain words. It provides summaries and recommendations to improve your organization's security measures. However, like setting up a new system in a library, it requires someone with the right permissions to set it up and manage it.

This change doesn't automatically alter how data is processed or stored but offers a new way to interact with data using AI. Admins will need to set it up in Microsoft Purview and ensure they have the right permissions. It's like installing a new software program on your computer; it won't run until you set it up properly.

In summary, the Data Security Posture Agent is a tool designed to help data security admins manage risks more effectively by understanding the content's context, much like a librarian who knows the stories behind the books, rather than just the words within them.