Microsoft Purview DLP: New policy configuration options available for inline network and Edge for Business

Introduction

We’re introducing new policy configuration options in Microsoft Purview Data Loss Prevention (DLP) to help organizations enhance data security across inline network traffic and Edge for Business browser. These updates provide administrators with more granular controls for discovering and protecting sensitive data in unmanaged cloud apps, and additional options for defining enforcement conditions and user notifications.

This message is associated with Microsoft 365 Roadmap ID 557976.

When this will happen

• Public Preview: Rollout will begin late March 2026 and is expected to complete by late April 2026.
• General Availability (Worldwide): Rollout will begin late April 2026 and is expected to complete by late May 2026.

How this affects your organization

Who is affected

• Administrators managing Microsoft Purview collection policies and DLP policies
• Organizations using Purview network data security or Purview browser data security in Edge for Business
• Users accessing unmanaged cloud apps through network traffic or Edge for Business (when policies are configured)

What will happen

• Administrators can scope Purview collection policies for unmanaged cloud apps based on the presence of sensitivity labels.
• Administrators can use “URL contains text” as a condition or exception in Purview DLP policies.
• Administrators can configure email notifications to alert users when activities are blocked.
• Features are available by default once rolled out but require admin configuration to take effect.
• Existing policies are respected and not changed automatically.

What you can do to prepare

No action is required before rollout.

• Review the new options in the Microsoft Purview portal.
• Update existing policies if additional control is desired.
• Inform other data security administrators of these updates.
• Decide whether to enable end-user email notifications.

Compliance considerations

This update enhances existing compliance and DLP capabilities by adding new configuration options. Review internal compliance requirements to determine whether policy updates are appropriate.