M365 Archive

RM567010 - Microsoft Purview: Data Loss Prevention - User Based Aggregation of DLP Alerts

Microsoft 365 Roadmap

Summary

Enable aggregation of DLP alerts based on common entities user even when multiple rules are matched. This feature should consolidate related alert events into a single alert object to: Reduce alert noise, simplify investigation workflows, enhance contextual understanding of violations.

Roadmap ID

567010

View in M365 Roadmap

Last Updated

Sep 16, 2026

Published Jul 7, 2026

View version history

Status

In development

Release

General Availability

Platforms

Web

Service

Microsoft Purview

Tag

In development
General Availability
GCC
GCC High
DoD

Cloud

DoD
GCC
GCC High

Description

Enable aggregation of DLP alerts based on common entities user even when multiple rules are matched. This feature should consolidate related alert events into a single alert object to: Reduce alert noise, simplify investigation workflows, enhance contextual understanding of violations.

GA date: January CY2027

Version history

2 versions tracked

Updated 1 time since Jul 7, 2026. Microsoft Message Center only ever shows the current version; this archive preserves the history.

Compare latest to previous (v1)

Compare any two versions

From
To
  1. Sep 16, 2026 · 10:57 PMLatest · v2

    Changed: Body

  2. Jul 7, 2026 · 11:10 PMOriginal · v1

    Changed: Initial version

    View this versionCompare to latest