Microsoft Purview DLP will now scan and classify sensitive data in image metadata when OCR is unavailable, improving data protection. This feature, rolling out from mid-July to early August 2025, requires no admin action and is enabled by default. Review DLP policies to ensure alignment with data protection goals.
We're enhancing Microsoft Purview Data Loss Prevention (DLP) to improve data protection coverage. With this update, DLP will now scan and classify sensitive data embedded in image metadata when Optical Character Recognition (OCR) is not available. This ensures better detection of sensitive information in scenarios where text is not visible in the image itself.
This message is associated with Microsoft 365 Roadmap ID 495459
When this will happen:
General Availability (Worldwide): Rollout will begin in mid-July 2025 and is expected to complete by early August 2025.
How this affects your organization:
Once this feature is rolled out, DLP policies will automatically begin scanning image metadata for sensitive data, even when OCR is turned off. This helps ensure that sensitive information embedded in image files is not overlooked. No configuration changes are required—this feature is on by default.
What you can do to prepare:
No admin action is needed. However, we recommend reviewing your existing DLP policies to ensure they are aligned with your organization’s data protection goals.
Compliance considerations: