Skip to content
← Back to the guide

Microsoft Purview Data Loss Prevention — a deep dive

8slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 8

Microsoft Purview Data Loss Prevention — a deep dive

DLP policies detect and prevent sensitive data from leaving Microsoft 365. Here's the architecture and how to roll them out.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/purview-data-loss-prevention-deep-dive

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 8
01

What is Microsoft Purview DLP?

A policy engine that detects sensitive information — credit card numbers, health data, credentials, custom patterns, classifier-detected content — in Exchange, SharePoint, OneDrive, Teams, endpoints, and connected apps,…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/purview-data-loss-prevention-deep-dive

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 8
02

What is a sensitive information type?

A definition Purview uses to find data: a pattern (regex), validation (checksum), supporting keywords, and a confidence level. Microsoft ships hundreds (national IDs, financial numbers, credentials); you can build custo…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/purview-data-loss-prevention-deep-dive

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 8
03

Does Purview DLP work on Windows and macOS devices?

Yes, with Endpoint DLP (E5 or E5 Compliance): it monitors and controls copying sensitive files to USB, printing, uploading to unsanctioned websites, and pasting into unsanctioned apps, using Defender for Endpoint's sens…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/purview-data-loss-prevention-deep-dive

Slide 4Download PNG
M
solvingmicrosoft365.com
5 / 8
04

Regulated PII (SSN, national ID, health record)

Exchange (outbound): Block with override + policy tip · SharePoint / OneDrive (external share): Block external share, notify owner · Teams (chat + channel): Block with override in external channel; audit internal · Endp…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/purview-data-loss-prevention-deep-dive

Slide 5Download PNG
M
solvingmicrosoft365.com
6 / 8
05

Payment card data (PAN, CVV)

Exchange (outbound): Block (no override) · SharePoint / OneDrive (external share): Block external share (no override) · Teams (chat + channel): Block (no override) · Endpoint (USB / cloud upload): Block USB and cloud up…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/purview-data-loss-prevention-deep-dive

Slide 6Download PNG
M
solvingmicrosoft365.com
7 / 8
06

Credentials (keys, tokens, connection strings)

Exchange (outbound): Block with override; strip on override · SharePoint / OneDrive (external share): Notify + revoke external link · Teams (chat + channel): Block with override · Endpoint (USB / cloud upload): Block on…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/purview-data-loss-prevention-deep-dive

Slide 7Download PNG
M
solvingmicrosoft365.com
8 / 8
07

Company-confidential (labelled Confidential)

Exchange (outbound): Notify + require justification · SharePoint / OneDrive (external share): Notify + require justification · Teams (chat + channel): Audit · Endpoint (USB / cloud upload): Warn

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/purview-data-loss-prevention-deep-dive

Slide 8Download PNG

Auto-generated from Microsoft Purview Data Loss Prevention — a deep dive. This page is not indexed and isn't part of the guide itself.