MC1478970 - Microsoft Purview | DLP-Create Purview network data security policies without pay-as-you-go configuration

Message Center

Summary

Microsoft Purview network data security policies can now be created without pay-as-you-go configuration, using Entra Global Secure Access Internet Access with appropriate licensing. Non-Microsoft integrations still require pay-as-you-go. Rollout begins late September 2026, enabling policy creation to protect sensitive data in network traffic automatically.

Published

Sep 24, 2026

Service

Microsoft Purview

Tag

New feature
Admin impact

More information

What and Why:

Based on customer feedback, Microsoft Purview network data security policies can be created and managed without configuring pay-as-you-go, regardless of the integration partners. These collection and DLP policies help discover and protect sensitive data shared with unmanaged cloud apps and websites (including AI) through browsers, applications, add-ins, APIs, and other channels. 

Microsoft Entra Global Secure Access Internet Access is included with the appropriate per-user, per-month licensing and works without pay-as-you-go. Integrations with non-Microsoft SASE and secure browser partners still require pay-as-you-go. Customers can create and configure policies for these non-Microsoft integrations, but the integrations will not function until pay-as-you-go is configured. 

For more information, see Learn about Microsoft Purview Network Data Security

Rollout Schedule:

Global: We will begin rolling out on late September 2026 and expect to complete by late October 2026.

Impact on Your Organization:

This change becomes available automatically in your tenant as it rolls out. Administrators can then create policies to protect text and files sent and received through network traffic using Entra Internet Access without requiring a pay-as-you-go subscription. Existing inline web traffic Purview policies applied to the network continue to work without interruption.

Action Required/Recommendations:

Learn more about the solution, including prerequisites, using the following links: 

Compliance considerations:

Does the change include an admin control and, can it be controlled through Entra ID group membership?Yes. The feature includes or affects admin controls, policies, permissions, roles, authentication, or management settings as described in this message. Review the linked documentation or admin center controls for group-based configuration support.

----------------------------For Processing Do Not Delete------------------------------

Do you need to update your Service description: No

Post Publish Date: 9/23/2026

Additional reviewers: [email protected]

Change type: ConfigurationChange

Product marketing manager: [email protected]