Table of Contents
Summary
- New policy configuration options in Microsoft Purview Data Loss Prevention (DLP) enhance data security for unmanaged cloud apps and Edge for Business.
- Administrators gain more granular controls, including scoping collection policies by sensitivity labels and defining conditions for DLP policies.
- Email notifications can be configured to alert users when activities are blocked.
- Existing policies remain unchanged unless manually updated by administrators.
- Review and update policies in the Microsoft Purview portal to leverage new features.
Admin Impact: Medium
User Impact: Low
Release Start: 30 Apr 2026
Release End: 31 May 2026
Services: Purview
Category: Stay informed
Tags: New Feature, User Adoption, Admin Action
History
3/9/2026 Item Added to Message Center
Microsoft Message
Introduction
We’re introducing new policy configuration options in Microsoft Purview Data Loss Prevention (DLP) to help organizations enhance data security across inline network traffic and Edge for Business browser. These updates provide administrators with more granular controls for discovering and protecting sensitive data in unmanaged cloud apps, and additional options for defining enforcement conditions and user notifications.
This message is associated with Microsoft 365 Roadmap ID 557976.
When this will happen
- Public Preview: Rollout will begin late March 2026 and is expected to complete by late April 2026.
- General Availability (Worldwide): Rollout will begin late April 2026 and is expected to complete by late May 2026.
How this affects your organization
Who is affected:
- Administrators managing Microsoft Purview collection policies and DLP policies
- Organizations using Purview network data security or Purview browser data security in Edge for Business
- Users accessing unmanaged cloud apps through network traffic or Edge for Business (when policies are configured)
What will happen:
- Administrators can scope Purview collection policies for unmanaged cloud apps based on the presence of sensitivity labels.
- Administrators can use “URL contains text” as a condition or exception in Purview DLP policies.
- Administrators can configure email notifications to alert users when activities are blocked.
- Features are available by default once rolled out but require admin configuration to take effect.
- Existing policies are respected and not changed automatically.
What you can do to prepare
No action is required before rollout.
- Review the new options in the Microsoft Purview portal.
- Update existing policies if additional control is desired.
- Inform other data security administrators of these updates.
- Decide whether to enable end-user email notifications.
Learn more:
- Microsoft Purview collection policies | Microsoft Learn
- Microsoft Purview data loss prevention | Microsoft Learn
- Microsoft Purview network data security | Microsoft Learn
- Microsoft Purview browser data security in Microsoft Edge for Business | Microsoft Learn
Compliance considerations
This update enhances existing compliance and DLP capabilities by adding new configuration options. Review internal compliance requirements to determine whether policy updates are appropriate.