MC1143996 - Microsoft Purview compliance portal: Data Loss Prevention - Upcoming Change to DLP Alert Settings

Service

Microsoft Purview

Last Updated

Sep 24, 2025

Published Aug 29, 2025

Tag

Updated message
Admin impact
Retirement

Summary

Starting September 26, 2025, Microsoft Purview will update DLP alert settings to remove "Generate Alert" from rules where corresponding Protection Alerts were disabled via PowerShell. To keep receiving alerts, admins must update and save rules in the portal or re-enable alerts using the Set-DlpComplianceRule cmdlet.

More information

Updated September 24, 2025: We have updated the content. Thank you for your patience.

Introduction

We have identified that some tenants are using DLP rules in which alert generation has been enabled using the Microsoft Purview portal policy configuration page but the corresponding Alert Policy (Protection Alert) was disabled or deleted using "Set-ProtectionAlert" PowerShell cmdlet (Learn more). Due to this the alert generation gets turned off for the associated DLP rule – even though the alert it appears active on Purview portal policy configuration UX.

If you wish to continue receive alerts for these rules, please take one of the following actions:

  • Open the rule in the Purview portal, make any update, and save the configuration.
  • Use the PowerShell cmdlets to re-enable alert generation for the rule. (Learn more)

When this will happen

This change will begin rolling out on September 26, 2025.

How this affects your organization

To ensure consistency we will update the DLP rule to remove Generate Alert as an action. Since alerts were disabled using Protection Alert PowerShell cmdlets there will be no change in alert generation behavior for corresponding DLP rule and policy. We are only ensuring there is consistency between DLP rules (with Generate Alert as an action) and their corresponding Alert policies (protection alert)

What you can do to prepare:

If you wish to receive alerts for these rules, please take one of the following actions:

  • Open the rule in the Purview portal, make any update, and save the configuration.
  • Use the PowerShell cmdlet “Set-DlpComplianceRule” to re-enable alert generation for the rule. (Learn more).

    Compliance considerations

    Compliance Area Impact
    Alters how existing customer data is processed, stored, or accessed No affect.
    Modifies Purview capabilities No affect.
    Alters how admins can monitor, report on, or demonstrate compliance activities No affect.
    Includes an admin control Admins can re-enable alert generation if they wish to via portal or Set-"DlpComplianceRule" PowerShell cmdlet.
    Allows user to enable/disable the feature Admins can re-enable alert generation if they wish to via portal or Set-"DlpComplianceRule" PowerShell cmdlet.