MC837079 – Purview | Data Loss Prevention: Microsoft 365 Groups scoping in Teams DLP policy extend protection to 1:1/n chats (archived)

Microsoft Teams logo

check before: 2024-08-31

Product:

Microsoft 365 Groups, Purview Communication Compliance, Purview Data Loss Prevention, Syntex, Teams

Platform:

Web, World tenant

Status:

Launched

Change type:

New feature, User impact, Admin impact

Links:

401126

Details:

Summary:
Microsoft 365 Groups in Teams DLP policy will now automatically include 1:1 and group chats for protection, without needing to add users or groups manually, except when using OCR. Rollout begins late August 2024, with completion by late September 2024. Admins should review their Teams DLP policies in preparation.

Details:
When scoping policies to Microsoft 365 Groups in Microsoft Teams Data Loss Prevention (DLP) policies, members of Teams standard and shared channel chats associated with the groups are currently protected by the policies. The messages are scanned/evaluated for sensitive content. This change will automatically extend the protection to standard/shared channels chats in other Microsoft 365 Groups and 1:1/n (non-channel) chats. There is no longer a need to add users, security groups, or other Microsoft 365 Groups to protect these chats, except for customers that have enabled optical character recognition (OCR) in Teams chat.

This message is associated with Microsoft 365 Roadmap ID 401126.
[When this will happen:]
General Availability (Worldwide): We will begin rolling out late August 2024 and expect to complete by late September 2024.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2024-07-27

updated:
2024-07-27

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Direct effects for Operations**

Data Loss Prevention Policy Changes
Automatic extension of DLP policies to include 1:1 and group chats may lead to unintended data exposure or compliance issues if existing policies are not reviewed and adjusted accordingly.
   - roles: IT Admin, Compliance Officer
   - references: https://learn.microsoft.com/purview/dlp-microsoft-teams?tabs=purview#scope-of-dlp-protection, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=401126

User Experience Disruption
Users may experience confusion or disruption in their communication if DLP policies are not properly configured, leading to potential delays in message delivery or access to sensitive information.
   - roles: End User, Team Leader
   - references: https://learn.microsoft.com/purview/dlp-microsoft-teams?tabs=purview#scope-of-dlp-protection, https://learn.microsoft.com/microsoft-365/syntex/ocr-overview

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

In the world of IT, changes and updates can sometimes feel overwhelming, especially if you're not immersed in the technical details daily. Let's break down a recent update from Microsoft in a way that's easy to understand, using a real-life analogy.

Imagine you are the manager of a large office building. In this building, you have several meeting rooms (representing Teams channels) and many private offices (representing 1:1 or group chats). You want to ensure that sensitive information doesn't leak out of any of these spaces. So, you hire security guards (representing Data Loss Prevention or DLP policies) to monitor the meeting rooms.

Previously, you had to specifically instruct these guards to also keep an eye on the private offices. This was a bit cumbersome because you had to manually list out which offices needed protection. Now, with the new update, these security guards will automatically start monitoring all private offices as well, without you needing to provide additional instructions. This means better security coverage with less effort on your part.

To put it in the context of Microsoft Teams, previously, DLP policies were set up to protect communications within Teams channels (the meeting rooms). If you wanted to protect private chats (the private offices), you had to manually add each user or group. With the new update, starting from late August 2024 and completing by late September 2024, the DLP policies will automatically extend to cover 1:1 and group chats as well. This means any sensitive information shared in these private chats will also be monitored and protected.

However, there is an exception. If your organization uses Optical Character Recognition (OCR) to scan text within images in chats, you will still need to manually add users or groups for this specific protection.

For administrators, this means you should review your current DLP policies to ensure they align with this new automatic coverage. If you have specific needs where you don't want this automatic extension, you may need to contact Microsoft support to discuss delaying the rollout for your organization.

In summary, this update simplifies the process of protecting sensitive information across all types of communication within Microsoft Teams, making it easier to ensure data security without additional manual setup. Just like hiring a more efficient security team for your office building, this change aims to enhance protection with less administrative effort.

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



Last updated 5 months ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!