MC987322 – Microsoft Purview | Endpoint Data Loss Prevention: Full file evidence collection on macOS devices

Product:

Purview Communication Compliance, Purview Data Loss Prevention

Platform:

Mac, Online, Web, World tenant

Status:

Launched

Change type:

Admin impact, New feature, Updated message, User impact

Links:

476098

Details:

Summary:
Microsoft Purview is updating the rollout timeline for Endpoint Data Loss Prevention's full file evidence collection on macOS devices. Public Preview will start in late February 2025, and General Availability will begin in late April 2025. No admin action is required, but user notification and documentation updates are recommended.

Details:
Updated April 15, 2025: We have updated the rollout timeline below. Thank you for your patience.
Coming soon from Microsoft Purview: If you have enabled full file evidence collection, Data Loss Prevention can copy a file that matches a DLP policy from onboarded macOS devices to a Microsoft Azure storage account.
This message is associated with Microsoft 365 Roadmap ID 476098.
[When this will happen:]
Public Preview: We will begin rolling out late February 2025 and expect to complete by late March 2025.
General Availability (Worldwide): We will begin rolling out late April 2025 (previously early April) and expect to complete by late May 2025 (previously early May).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-01-24

updated:
2025-04-16

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft Purview is updating its Endpoint Data Loss Prevention (DLP) on macOS devices to automatically save flagged files to a secure Microsoft Azure storage account, with a Public Preview in February 2025 and full General Availability by April 2025, requiring no action from administrators.

Direct effects for Operations**

Data Loss Prevention Implementation
Without proper user notification, users may be unaware of the new file evidence collection feature, leading to confusion about file uploads and potential data privacy concerns.
   - roles: End Users, Compliance Officers
   - references: https://learn.microsoft.com/purview/dlp-copy-matched-items-learn, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476098

User Experience Disruption
The automatic rollout of the new feature may disrupt users' workflows if they are not prepared for the changes in file handling and data uploads.
   - roles: End Users, IT Support Staff
   - references: https://learn.microsoft.com/purview/dlp-copy-matched-items-learn, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476098

Compliance and Data Management
Failure to update documentation and inform users may lead to non-compliance with data management policies, as users may not understand the implications of the new DLP features.
   - roles: Compliance Officers, Data Protection Officers
   - references: https://learn.microsoft.com/purview/dlp-copy-matched-items-learn, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476098

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Data Security and Compliance
With the introduction of full file evidence collection for macOS devices, organizations can significantly improve their data security posture. This feature allows for better tracking and management of sensitive data, ensuring compliance with regulations such as GDPR and HIPAA.
   - next-steps: Conduct a risk assessment to identify sensitive data types within the organization and develop a compliance strategy leveraging the new DLP capabilities.
   - roles: Compliance Officer, IT Security Manager, Data Protection Officer
   - references: https://learn.microsoft.com/purview/dlp-copy-matched-items-learn, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476098

Improved User Awareness and Training
As users will need to be notified about the changes and the implications of full file evidence collection, this presents an opportunity to enhance user training programs. Educating users on data loss prevention and security best practices can lead to a more security-conscious culture within the organization.
   - next-steps: Develop and implement a training program that includes information on DLP policies, the importance of data protection, and how to handle sensitive information responsibly.
   - roles: Training Coordinator, IT Support Staff, HR Manager
   - references: https://learn.microsoft.com/purview/dlp-copy-matched-items-learn, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476098

Streamlined IT Operations
The automatic nature of the full file evidence collection means that IT staff can focus on other critical tasks rather than manual configurations or monitoring. This efficiency can lead to reduced operational costs and improved service delivery.
   - next-steps: Evaluate current IT processes to identify areas where automation can be further implemented, and reallocate resources to focus on strategic initiatives rather than routine maintenance.
   - roles: IT Operations Manager, System Administrator, IT Director
   - references: https://learn.microsoft.com/purview/dlp-copy-matched-items-learn, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=476098

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only