Microsoft Purview compliance portal: Endpoint Data Loss Prevention: Collection Policies: Scope classifiers and activity

Microsoft Purview introduces collection policies for granular control over data signals collected on Windows endpoints, enhancing targeted discovery without enforcement actions. This affects multiple Purview solutions and requires enabling DLP Always audit. Rollout begins late July for Gov Clouds, with no immediate impact until configured. We have introduced a new configuration option in Microsoft Purview called collection policies for targeted signal discovery and collection. Collection policies will allow administrators to fine tune the signals and data collected for Purview solutions at the tenant level. This includes specifying which Sensitive Information Types (SITs) are classified and what activities are collected on Windows endpoint devices. This message is associated with Microsoft 365 Roadmap ID 493750. When this will happen: Gov Clouds: Gov Clouds rollout will begin in end of July and continue into mid August.  How this will affect your organization: Key benefits of collection policies Granular control: Align with regulatory, regional, and organizational requirements that specify what types of data can be collected. Noise reduction: Focus on the most relevant data security risks by tailoring data discovery and signals to what’s important for your organization Purview solutions impacted Unlike traditional Purview Data Loss Prevention (DLP) or Microsoft Purview Information Protection policies, collection policies are designed to streamline discovery of relevant information, rather than apply enforcement or take action on that information. There is no action taken from these policies to block content, as policies are meant to scope what content is collected and surfaces to administrators. Using collection policies to scope signal collection will impact what is surfaced in several Purview solutions, including Insider Risk Management (IRM), Data Security Posture Management (DSPM), eDiscovery, Data Lifecycle Management (DLM), Activity Explorer, and more. Learn more: Collection Policies Solution Overview (preview) | Microsoft Learn There is no immediate impact of this feature release. If you choose to leverage collection policies, admins can now choose which signals to discover in devices. After you enable collection policies, you may see various updates to the Purview DLP audit experience. These updates may affect your organizations current configuration in the following ways: Activities to audit on your tenant will […]

The post Microsoft Purview compliance portal: Endpoint Data Loss Prevention: Collection Policies: Scope classifiers and activity appeared first on M365 Admin.