MC806525 – Use sensitivity labels in Microsoft 365 apps when connected experiences are disabled

Product:

Defender, Microsoft 365 Apps, Purview Communication Compliance, Purview Data Loss Prevention, Purview Information Protection, SharePoint, Teams

Platform:

Windows Desktop, World tenant

Status:

Launched

Change type:

Feature update, Admin impact

Links:

400716

Details:

Summary:
Organizations can disable Microsoft 365 connected experiences for privacy without affecting sensitivity labels. Microsoft Purview services are now separate from privacy control policies and will follow Purview's security admin controls. This update, associated with Roadmap ID 400716, will be rolled out from June to August 2024.

Details:
Your organization can now disable connected experiences for privacy concerns without impacting data security policies, such as sensitivity labels.

Services associated with Microsoft Purview (sensitivity labels, rights management, and so on) are no longer controlled by policy settings to manage privacy controls for Microsoft 365 apps. Instead, these services will rely on their existing security admin controls in Purview portals.
This message is associated with Microsoft 365 Roadmap ID 400716.
[When this will happen:]
Public Preview: We will begin rolling out late June 2024 and expect to complete by early August 2024.
General Availability: We will begin rolling out early August 2024 and expect to complete by mid-August 2024.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
Current Channel, Preview

Created:
2024-06-29

updated:
2024-06-29

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Direct effects for Operations**

Disabling Connected Experiences
Disabling connected experiences may lead to a lack of automatic sensitivity label recommendations, resulting in potential misclassification of sensitive data.
   - roles: Compliance Officer, IT Administrator
   - references: https://learn.microsoft.com/purview/sensitivity-labels-office-apps, https://learn.microsoft.com/deployoffice/privacy/connected-experiences

Impact on Data Loss Prevention
Without connected experiences, users may not receive Data Loss Prevention policy tips, increasing the risk of data breaches due to unawareness of policy violations.
   - roles: Data Protection Officer, End User
   - references: https://learn.microsoft.com/microsoft-365/compliance/use-notifications-and-policy-tips, https://learn.microsoft.com/deployoffice/privacy/connected-experiencesconnected-experiences-that-analyze-your-content

Manual Sensitivity Label Application
Users may need to manually apply sensitivity labels, leading to increased workload and potential errors in data handling.
   - roles: End User, Compliance Officer
   - references: https://learn.microsoft.com/purview/sensitivity-labels-office-appsif-you-need-to-turn-off-built-in-labeling-in-office-apps-on-windows, https://support.microsoft.com/office/2f96e7cd-d5a4-403b-8bd7-4cc636bae0f9

Configutation Options**

Disable Connected Experiences
Organizations can disable connected experiences in Microsoft 365 apps to enhance privacy without affecting sensitivity labels.
   - technical instructions: 1. Go to the Microsoft 365 admin center. 2. Navigate to Settings > Org settings. 3. Under Services, select 'Connected experiences'. 4. Toggle the setting to disable connected experiences.
   - references: https://learn.microsoft.com/deployoffice/privacy/manage-privacy-controls, https://learn.microsoft.com/deployoffice/privacy/connected-experiences

Manage Sensitivity Labels
Sensitivity labels can be managed independently of connected experiences, allowing organizations to maintain data security policies.
   - technical instructions: 1. Access the Microsoft Purview compliance portal. 2. Navigate to 'Solutions' > 'Information protection'. 3. Select 'Labels' to create or manage sensitivity labels.
   - references: https://learn.microsoft.com/purview/sensitivity-labels-office-apps, https://learn.microsoft.com/purview/sensitivity-labels-office-appsif-you-need-to-turn-off-built-in-labeling-in-office-apps-on-windows

Disable Sensitivity Labels in Microsoft 365 Apps
Admins can disable sensitivity labels in Microsoft 365 apps while still using Purview policies in other workloads.
   - technical instructions: 1. Open the Microsoft 365 admin center. 2. Go to Settings > Org settings. 3. Under Services, select 'Information protection'. 4. Disable the sensitivity labels option.
   - references: https://learn.microsoft.com/purview/sensitivity-labels-office-apps, https://support.microsoft.com/office/2f96e7cd-d5a4-403b-8bd7-4cc636bae0f9

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only