MC1261590 - Microsoft Purview: Endpoint DLP - Add support of hyperlinks in warn and block toast messages for Edge browser

Introduction

Microsoft Purview Endpoint Data Loss Prevention (DLP) now supports hyperlinks in warn and block toast messages in Microsoft Edge. A toast message is a small, temporary notification shown to users to provide immediate feedback or guidance. With this update, data officers can include clickable links in these notifications to direct users to internal policies, training resources, or support guidance when a DLP rule is triggered.

This change is associated with Microsoft 365 Roadmap ID 558688.

When this will happen:

• General Availability (Worldwide): Rollout begins in early April 2026 and is expected to complete by mid-April 2026.

How this affects your organization:

Who is affected:

• Organizations using Microsoft Purview Endpoint DLP
• Users on Windows devices using Microsoft Edge
• Admins and data officers who configure Endpoint DLP policies

What will happen:

• Admins can include clickable hyperlinks in warn and block toast messages shown in Edge when an Endpoint DLP rule is triggered.
• Users will see a customized toast message that can link directly to:
  • Internal policy documentation
  • Training or awareness resources
  • Support or escalation guidance (for example, a SharePoint site)
• Existing Endpoint DLP policies and enforcement behavior are unchanged.
• The feature is available once required client and browser versions are installed.

What you can do to prepare:

• Deploy Microsoft Defender anti-malware client version 4.18.26020 or later.
• Deploy Microsoft Edge version 146 or later.
• Review and update Endpoint DLP notification text as needed.
• Inform helpdesk and security teams of the updated user experience.

Screenshot: Example of configuring a hyperlink in an Endpoint DLP warn or block notification in the Microsoft Purview portal

Compliance considerations:

Compliance area	Impact and explanation
Does the change alter how existing customer data is processed, stored, or accessed?	The change affects how Endpoint DLP notifications are presented to users by allowing hyperlinks in warn and block toast messages. It does not change how data is evaluated, stored, or enforced by DLP.
Does the change modify Data Loss Prevention (DLP) policies or enforcement?	Enforcement behavior remains the same, but admins can enhance user-facing warn and block messages with hyperlinks as part of existing Endpoint DLP policy configuration.
Does the change include an admin control?	Admins control whether hyperlinks are included through Endpoint DLP policy settings. There is no end-user control to enable or disable this feature.