MC837079 - Purview | Data Loss Prevention: Microsoft 365 Groups scoping in Teams DLP policy extend protection to 1:1/n chats

Service

Microsoft Purview

Published

Jul 26, 2024

Tag

New feature
User impact
Admin impact

Platforms

Web

Summary

Microsoft 365 Groups in Teams DLP policy will now automatically include 1:1 and group chats for protection, without needing to add users or groups manually, except when using OCR. Rollout begins late August 2024, with completion by late September 2024. Admins should review their Teams DLP policies in preparation.

More information

When scoping policies to Microsoft 365 Groups in Microsoft Teams Data Loss Prevention (DLP) policies, members of Teams standard and shared channel chats associated with the groups are currently protected by the policies. The messages are scanned/evaluated for sensitive content. This change will automatically extend the protection to standard/shared channels chats in other Microsoft 365 Groups and 1:1/n (non-channel) chats. There is no longer a need to add users, security groups, or other Microsoft 365 Groups to protect these chats, except for customers that have enabled optical character recognition (OCR) in Teams chat.

This message is associated with Microsoft 365 Roadmap ID 401126.

When this will happen:

General Availability (Worldwide): We will begin rolling out late August 2024 and expect to complete by late September 2024.

How this will affect your organization:

There is no change to your existing Teams DLP policy if you are also including users and security groups to protect the same set of users for 1:1/n chats. If you have a specific policy that only aims to protect channel chats for a specific set of users and not on their 1:1/n chat, file a Microsoft support ticket to provide more information for consideration to delay the rollout for your organization.

What you need to do to prepare:

Admins should review their existing Teams DLP policies to determine whether there will be any impact on particular policies in which users are protected only by Microsoft 365 Groups and no other Teams DLP policies that are scoped with user accounts or security groups.

This does not apply if your organization has enabled OCR. See Overview of optical character recognition in Microsoft Syntex - Microsoft Syntex | Microsoft Learn for details. 

Refer to Data loss prevention and Microsoft Teams | Microsoft Learn for more information on Teams DLP policy scoping once the rollout begins.