MC937930 – (Updated) Microsoft Purview | Data Loss Prevention: Restrict Microsoft 365 Copilot using content with sensitivity labels (archived)

Product:

Copilot, Microsoft 365 Copilot, Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention, Purview Information Protection

Platform:

Online, Web, World tenant

Status:

Launched

Change type:

Admin impact, Feature update, Updated message, User impact

Links:

423483

Details:

Microsoft Purview Data Loss Prevention (DLP) will soon extend to support Microsoft 365 Copilot. DLP policies will be able to identify sensitive documents based on sensitivity labels and exclude processing for Copilot interactions in Microsoft 365 Copilot Business Chat.
Updated February 6, 2025: We have updated the rollout timeline below. Thank you for your patience.
The preview does not support alerts, incident reports, and policy simulation. Audit records will be available at a later time after policy management is enabled for organizations. A Microsoft 365 Copilot license and a Microsoft 365 E5 license or equivalent are required to use this feature.
This message is associated with Microsoft 365 Roadmap ID 423483.
[When this will happen:]
Public Preview: We will begin rolling out mid-November 2024 and expect to complete by mid-December 2024.
General Availability: We will begin rolling out late June 2025 and expect to complete by late July 2025.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-11-20

updated:
2025-02-07

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft Purview Data Loss Prevention (DLP) is updating its policies to ensure Microsoft 365 Copilot doesn't access sensitive information, with administrators able to set these rules through the Microsoft Purview portal, requiring specific licenses for implementation.

Direct effects for Operations**

Data Access Restrictions
Users may experience restricted access to sensitive documents in Microsoft 365 Copilot, potentially hindering their ability to utilize AI features effectively.
   - roles: End Users, Data Protection Officers
   - references: https://aka.ms/dlp, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=423483

User Experience Disruption
The automatic implementation of DLP policies without prior user notification may lead to confusion and frustration among users who rely on Copilot for their tasks.
   - roles: End Users, IT Support Staff
   - references: https://aka.ms/dlp, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=423483

Compliance and Reporting Limitations
The lack of alerts, incident reports, and policy simulation during the preview phase may result in compliance risks and unaddressed data loss incidents.
   - roles: Compliance Officers, IT Administrators
   - references: https://aka.ms/dlp, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=423483

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only