Microsoft Purview DLP and Edge for Business: Automated blocking of unmanaged GenAI apps in unprotected browsers

Introduction

We’re streamlining how Microsoft Purview policies apply to unmanaged cloud apps accessed via the Edge browser. These updates reduce manual steps for admins and improve policy enforcement across browser environments, especially for organizations managing data sharing to Generative AI (GenAI) apps.

This change builds on the existing preview feature.

This message is associated with Microsoft 365 Roadmap ID 486368.

• Public preview is in progress.
• General availability: Rollout will begin in mid-October 2025 and is expected to complete by late October 2025.

How this affects your organization:

• Who is affected:
  • Admins managing Microsoft Purview collection and DLP policies targeting unmanaged GenAI apps in the browser.
  • Organizations using Microsoft Edge for Business and Edge configuration policies that activate Purview policies.
• What will happen:
  
  • Collection Policies
    
    • Previously: Required separate Edge configuration policy to apply protections with a browser blocking configuration.
    • Now: Collection policies apply directly in Edge without blocking configuration.
• DLP Policies
  • Previously: Admins manually created Edge configuration policies to block unsupported browsers.
  • Now: Edge configuration policies are automatically created and scoped to match DLP policies when DLP policies are created or updated.
• User experience:
  • Edge for Business: No impact.
  • Chrome with Purview extension: Browser usable; access to unmanaged GenAI apps is blocked.
  • Firefox and other browsers: Users are blocked from using the browser entirely.
• DLP Policy Modes:
  • Audit mode: Policy created but browser blocking is optional.
  • Block mode: Policy created and browser blocking is enforced.
• What you can do to prepare:
  • No action is required to enable these changes.
  • Inform your DLP and IT Admins of this update.
  • If you previously created Edge configuration policies scoped to all users and want to rely on automation:
    • Disable or delete the old Edge configuration policy.
    • Update your Purview DLP policy to trigger the automated behavior.
  • Learn more: Set up Microsoft Purview DLP policies in the Edge management service