MC785023Microsoft Purview | Endpoint Data Loss Prevention: Enhancements to the DLP capabilities on macOS endpoints

Coming soon for Microsoft Purview | Endpoint Data Loss Prevention: We are adding two new features to the DLP capabilities on macOS endpoints:

1. Context-based classification
2. Matched condition and short evidence for advanced classification

This message is associated with Microsoft 365 Roadmap ID 389378.

When this will happen:

General Availability (Worldwide): We will begin rolling out early May 2024 and expect to complete by mid-May 2024.

How this will affect your organization:

1. Context-based classification: Admins will be able to use contextual parameters (FileType Is, FileExtension Is) as DLP policy conditions. Admin can define these parameters individually or in conjunction with content-based conditions.
2. Matched conditions and short evidence for advanced classification: Matched conditions show the cause of flagged DLP policy matches, providing admins with a more comprehensive investigation experience. To view this feature, go to the Alerts dashboard, select the Events tab, and then select the Details tab to review the condition and its corresponding matched value.

In the Purview compliance portal, select an event at Data Loss Prevention > Alert to review matched conditions:

What you need to do to prepare:

This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your security team about this change and update any relevant documentation as appropriate.

Learn more

• Get started with Data Loss Prevention in the Microsoft Purview compliance portal.
• The Microsoft Purview compliance portal
• Learn about data loss prevention | Microsoft Learn