Copilot Studio – Upcoming updates to Data Loss Prevention policy enforcement

We are updating how we enforce Data Loss Prevention (DLP) policies in Copilot Studio. Currently, enforcing DLP policies is a two-step process. A DLP policy must first be created in the Power Platform admin center (PPAC) for your tenant and then you must opt-in to enforce the DLP policy to copilots in your tenant using PowerShell commands, which allows three different enforcement levels: Disabled. This is the default mode and no DLP checks are enforced for published bots or when updates are made to existing bots. Soft-Enabled. This mode allows published bots to continue to run without enforcing any DLP policies but prevents any further updates to bots that are affected by DLP blocks. Enabled. This mode enforces DLP policy checks for running bots and for updates made to existing bots. How does this affect me? We will be transitioning the default enforcement level from Disabled to Enabled in a two-stage process. Beginning in January 2025, the default mode for all tenants will be changed to Soft-Enabled. Following this change, published bots will continue to run and DLP checks will be enforced when publishing updates to bots. We will also be removing the option to change the enforcement mode back to Disabled in PowerShell. Finally, in February 2025, the default mode for all tenants will be changed to Enabled. Following this change, all published bots and any updates made to existing bots will be subject to DLP policies as defined within your tenant. We will also be removing the PowerShell commands to change the enforcement level. What do I need to do to prepare? We recommend updating your DLP policy enforcement level to Enabled prior to the planned updates outlined above. If you need additional time to make these updates beyond the planned enforcement change in February 2025, please contact Microsoft Support to apply for a temporary exception to these changes. Message ID: MC973179

The post Copilot Studio – Upcoming updates to Data Loss Prevention policy enforcement appeared first on M365 Admin.