Microsoft Purview | Data Loss Prevention: Adaptive Protection integration will be generally available

Coming soon to general availability, the integration of Adaptive Protection with Microsoft Purview Data Loss Prevention. This integration enables admins, who are granted access to change, create, update and/or delete policies to configure policies where users are automatically included in the scope of data loss prevention (DLP) policies based on insider risk levels. For example, a DLP policy integrated with insider risk levels will prevent high-risk users from printing sensitive data, while allowing low-risk users to do so. We communicated the preview for this feature in MC512627 Microsoft Purview compliance portal: Announcing Adaptive Protection in public preview. (preview) (Feb 2024). 

This integration will require a pre-requisite of E5 Compliance or Microsoft 365 E5 to use. Organizations that were using Adaptive Protection in public preview with Microsoft 365 E5 Insider Risk Management (IRM) or Microsoft 365 E5 Information Protection and Governance (IPG) Add-Ons - will need to upgrade to E5 Compliance to continue using Adaptive Protection. 

This message is associated with Microsoft 365 Roadmap ID 117352

When this will happen:

General Availability Worldwide: We will begin rolling out early June 2024 and expect to complete by early July 2024.     

How this will affect your organization:

Customers that were previously using Adaptive Protection with Microsoft 365 E5 Insider Risk Management (IRM) or Microsoft 365 E5 Information Protection and Governance (IPG) Add-Ons will be granted a 180-day grace period where your organization will continue to have access to Adaptive Protection without E5 Compliance or M365 E5 licenses. After this grace period, if your organization does not acquire E5 Compliance license, Adaptive Protection will be turned off for your organization. Users will no longer be assigned risk levels. Data Loss Prevention policies with the Insider risk level configured will not be deleted, but the policy will no longer be dynamic based on risk levels from Adaptive Protection.

What you need to do to prepare:

To maintain access to the Adaptive Protection integration with Data Loss Prevention beyond this 180-day grace period, your organization will need to upgrade to an E5 Compliance license if you do not already have one.

Additional Resources:

• Help dynamically mitigate risks with adaptive protection | Microsoft Learn