Skip to content
← Back to the guide

How to create a DLP policy in Microsoft Purview

8slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 8

How to create a DLP policy in Microsoft Purview

How to create a DLP policy in Microsoft Purview for card and personal data: locations, sensitive info types, rules and actions, simulation mode, enforcement.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-create-a-dlp-policy-in-microsoft-purview

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 8
01

Which licence do I need for DLP in Microsoft 365?

DLP for Exchange, SharePoint, OneDrive, and Teams is included in Microsoft 365 E3 and Business Premium (Office 365 E3 covers Exchange, SharePoint, OneDrive). Endpoint DLP (Windows and macOS devices), DLP for Defender fo…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-create-a-dlp-policy-in-microsoft-purview

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 8
02

What is simulation mode and should I use it?

Simulation mode (previously 'test mode') runs the policy, logs matches, and optionally shows policy tips, but blocks nothing. Always run new DLP policies in simulation for at least two weeks: it is the only way to see h…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-create-a-dlp-policy-in-microsoft-purview

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 8
03

Why does my DLP policy match things that are not credit cards?

Because a sensitive information type is a pattern plus checksum plus keywords, and low-confidence matches fire on numbers that pass the Luhn check by chance. Raise the confidence level to High on the rule, require a min…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-create-a-dlp-policy-in-microsoft-purview

Slide 4Download PNG
M
solvingmicrosoft365.com
5 / 8
04

Step 1: Start from a template or custom

Purview portal → Solutions → Data loss prevention → Policies → Create policy. Choose a template if one matches (Financial → PCI Data Security Standard, Privacy → GDPR variants by country) — templates pre-select sensitiv…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-create-a-dlp-policy-in-microsoft-purview

Slide 5Download PNG
M
solvingmicrosoft365.com
6 / 8
05

Step 2: Admin units and locations

Skip admin units unless you have delegated compliance per region. Under Locations, enable Exchange email, SharePoint sites, OneDrive accounts, and Teams chat and channel messages. Leave Devices off for the first policy…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-create-a-dlp-policy-in-microsoft-purview

Slide 6Download PNG
M
solvingmicrosoft365.com
7 / 8
06

Step 3: Define the rules

Choose Create or customize advanced DLP rules and build two:

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-create-a-dlp-policy-in-microsoft-purview

Slide 7Download PNG
M
solvingmicrosoft365.com
8 / 8
07

Step 4: Policy mode: simulation

Choose Run the policy in simulation mode and tick Show policy tips while in simulation mode. Finish. The policy takes up to an hour to distribute and starts logging matches.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-create-a-dlp-policy-in-microsoft-purview

Slide 8Download PNG

Auto-generated from How to create a DLP policy in Microsoft Purview. This page is not indexed and isn't part of the guide itself.