MC987322 - Microsoft Purview | Endpoint Data Loss Prevention: Full file evidence collection on macOS devices

Coming soon from Microsoft Purview: If you have enabled full file evidence collection, Data Loss Prevention can copy a file that matches a DLP policy from onboarded macOS devices to a Microsoft Azure storage account.

This message is associated with Microsoft 365 Roadmap ID 476098.

When this will happen:

Public Preview: We will begin rolling out late February 2025 and expect to complete by late March 2025.

General Availability (Worldwide): We will begin rolling out early April 2025 and expect to complete by early May 2025.

How this will affect your organization:

Before this rollout, if you enable full file evidence collection in Data Loss Prevention, a file that matches a DLP policy from onboarded macOS devices will not upload to a Microsoft Azure storage account.

In Data Loss Prevention, you can configure Setup evidence collection for file activities on devices to enable full file evidence collection:

This change will be available by default.

What you need to do to prepare:

This rollout will happen automatically by the specified date with no admin action required before or after the rollout. If you have already enabled Full file evidence collection, macOS devices protected by endpoint DLP will automatically upload files after this rollout. You may want to notify your users about this change and update any relevant documentation.

There is no change required to your existing DLP policies as they will automatically include macOS devices in your organization after this rollout.

Learn more: Learn about collecting files that match DLP policies from devices | Microsoft Learn for more details on evidence collection.