MIP Data Loss Prevention Concepts

With a DLP policy, you can:

Identify sensitive information

• DLP works on many locations, such as Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams.
• For example, you can identify any document containing a credit card number that’s stored in any OneDrive for Business site, or you can monitor just the OneDrive sites of specific people.

Prevent the accidental sharing of sensitive info.

• For example, you can identify any document or email containing a health record that’s shared with people outside your organization, and then automatically block access to that document or block the email from being sent.

Monitor and protect sensitive info 

• like in Exchange Online, SharePoint Online, and OneDrive for Business,
• these Office desktop programs include the same capabilities to identify sensitive information and apply DLP policies.
• DLP provides continuous monitoring when people share content in these Office programs.

Help users learn how to stay compliant without interrupting their workflow.

• You can educate your users about DLP policies and help them remain compliant without blocking their work.
• For example, if a user tries to share a document containing sensitive information, a DLP policy can both send them an email notification and show them a policy tip in the context of the document library that allows them to override the policy if they have a business justification.
• The same policy tips also appear in Outlook on the web, Outlook, Excel, PowerPoint, and Word.