MC1108129 - Microsoft Purview compliance portal: Enhanced Metadata Scanning for Images in Exchange DLP

Service

Microsoft 365 suite
Microsoft Purview

Published

Jul 2, 2025

Tag

New feature
User impact
Admin impact

Platforms

Web

Summary

Microsoft Purview DLP will now scan and classify sensitive data in image metadata when OCR is unavailable, improving data protection. This feature, rolling out from mid-July to early August 2025, requires no admin action and is enabled by default. Review DLP policies to ensure alignment with data protection goals.

More information

We're enhancing Microsoft Purview Data Loss Prevention (DLP) to improve data protection coverage. With this update, DLP will now scan and classify sensitive data embedded in image metadata when Optical Character Recognition (OCR) is not available. This ensures better detection of sensitive information in scenarios where text is not visible in the image itself.

This message is associated with Microsoft 365 Roadmap ID 495459

When this will happen:

General Availability (Worldwide): Rollout will begin in mid-July 2025 and is expected to complete by early August 2025.

How this affects your organization:

Once this feature is rolled out, DLP policies will automatically begin scanning image metadata for sensitive data, even when OCR is turned off. This helps ensure that sensitive information embedded in image files is not overlooked. No configuration changes are required—this feature is on by default.

What you can do to prepare:

No admin action is needed. However, we recommend reviewing your existing DLP policies to ensure they are aligned with your organization’s data protection goals. 

Compliance considerations:

  • Alters how existing customer data is processed, stored, or accessed Yes – image metadata is now included in DLP scans
  • Modifies DLP, labels, or other Purview capabilities Yes – expands DLP scanning scope
  • Alters compliance monitoring/reporting Maybe – may affect reporting visibility for image metadata