MC284828: Announcing general availability of data loss prevention (DLP) in Microsoft 365 Activity Explorer

You will soon be able to view data loss prevention (DLP) data sets within the Microsoft 365 compliance center Activity explorer. This feature was previously announced in public preview (MC244487) and is now coming to general availability. This message is associated with Microsoft 365 Roadmap ID 85594.

DLP-related data sets which currently flow into Microsoft 365 Audit logs (i.e., Exchange Online, SharePoint Online, OneDrive, and Teams DLP) will now also surface within Activity Explorer and will now be available for Teams DLP under an activity called ‘DLP rule matched’.

MC284828: Announcing general availability of data loss prevention (DLP) in Microsoft 365 Activity Explorer

Affected Workloads

  • Microsoft 365 suite

When this will happen

Rollout will begin in mid-September and is expected to be complete by early October.

How this will affect your organization

If you have active DLP policies in place (i.e., Exchange Online, SharePoint Online, OneDrive, and Teams DLP), your DLP-related data sets currently flow into Auditing. They will now also be viewable in Activity explorer under an activity called DLP rule matched.
They will now also be viewable in Activity explorer under an activity called DLP rule matched.

Activity explorer provides a view of historical activity to help you understand what actions are being taken with your sensitive labeled content. This overview can help you determine which controls you have in place, such as data loss prevention policies, are effective as well as actions you might take to manage them more effectively.

What you need to do to prepare

Data will automatically flow into Activity explorer. Admins can opt to filter this data out of the Activity explorer view by deselecting DLP rule matched activities.

Message ID: MC284828
Published: 13 September 2021
Updated: 14 September 2021