MC791114: Data Loss Prevention: Decoupling policy tips and email notifications for SharePoint and OneDrive

Announcement IDMC791114Published Date05-08-2024
ServiceGeneralLast Updated08-02-2024
CategoryStay informedExpiration Date02-03-2025
Roadmap ID394279Action Required by Date
TagsAdmin impact


Summary
                Microsoft is updating Data Loss Prevention for SharePoint and OneDrive by separating policy tips and email notifications. Admins will be able to configure them independently. Rollout begins late October 2024, with General Availability by late December 2024. Admins can use PowerShell or Purview to configure settings after the update.


More Information

Coming soon to Microsoft Purview | Data Loss Prevention: When an admin wants to enable user email notifications, policy tips also need to be enabled and vice versa. After this rollout, notifications and policy tips will be decoupled, and admins can configure the following rules to enable:

  1. Only a user email notification
  2. Only a policy tip
  3. A user email notification and a policy tip
  4. No policy tips or user email notifications

After this rollout, policy tips and user email notifications will align with the behavior currently available with Microsoft Exchange.

When this will happen:

Public Preview: We will begin rolling out late October 2024 (previously early July) and expect to complete by late November 2024 (previously mid-August).

General Availability Worldwide: We will begin rolling out late November 2024 (previously mid-September) and expect to complete by late December 2024 (previously late September).

How this will affect your organization:

After rollout, to configure policy tips and user email notifications, you can use PowerShell or Purview | Data Loss Prevention.

In PowerShell

After rollout, use the new parameter called -NotifyUserType with the cmdlets New-DlpComplianceRule and Set-DlpComplianceRule.

Use New-DlpComplianceRule to create a new rule. Use Set-DlpComplianceRule to update an existing rule.

  • Default value: NotSet
  • To enable a policy tip: PolicyTip
  • To enable a user email notification: Email
  • To enable a user email notification and a policy tip: Email,PolicyTip

Example 1: New-DlpComplianceRule -Name "PT rule" -Policy "Policy Name" -ContentContainsSensitiveInformation @{Name="India Unique Identification (Aadhaar) Number"} -NotifyUserType PolicyTip -NotifyUser SiteAdmin,LastModifier,Owner

Example 2: Set-DlpComplianceRule -Identity "Rule Name" -NotifyUserType Email

To check that the value is set correctly, check the following and check the parameter value for NotifyUserType:

Get-DlpComplianceRule -Identity "Rule Name" | fl

In Data Loss Prevention (DLP)

Before rollout:

Data Loss Prevention

After rollout:

Data Loss Prevention

DLP examples

Rule 1: Configured to only trigger a user email notification:

user email notification

Rule 2: Configured to only trigger a policy tip:

trigger a policy tip

Rule 3: Configured to trigger a user email notification and a policy tip:

email notification and a policy tip

email notification and a policy tip

What you need to do to prepare:

This rollout will happen automatically by the specified dates with no admin action required before the rollout. You may want to update any relevant documentation as appropriate.

Previous Post Next Post