DLP - Adding matched attachment details in Activity Explorer for Data Loss Prevention rules in Exchange

Updated August 26, 2024: To ensure the optimal experience for our customers, we have decided not to proceed with the rollout at this time. We will communicate via Message center when we are ready to proceed. Thank you for your patience.

We are adding new fields in Microsoft Exchange to help prevent data loss. With these updates, admins can see more details about the attachments that are present in the email that violated the Data Loss Prevention (DLP) rules, including name, size, and labels. There will be new fields for the attachments that are in emails when they match a DLP rule that will be displayed in Activity Explorer, DLP Alerts, and Microsoft Theft Protection (MTP) Alerts. With these updates, you can get better insights into the violation that has occurred even before you start getting into the finer details of the issue.

This message is associated with Microsoft 365 Roadmap ID 369015

When this will happen:

We will communicate via Message center when we are ready to proceed.

How this will affect your organization:

You will see more details about the attachments that are present in emails when violations occur.

Activity Explorer:

DLP Alerts:

MTP Alerts:

What you need to do to prepare:

There is no action needed to prepare for this change. You may want to notify your users about this change and update any relevant documentation as appropriate.