@63608335 Thank you for reaching out to us. As I understand you want to restrict the file download based on the labels which you have configured in the compliance portal, in order to block the file you can leverage Defender for Cloud apps - https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad#:~:text=for%20Cloud%20Apps-,Create%20a%20block%20download%20policy%20for%20unmanaged%20devices,-Defender%20for%20Cloud
Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB) that operates on multiple clouds. It provides rich visibility, control over data travel, and sophisticated analytics to identify and combat cyberthreats across all your cloud services.
Reference: https://www.youtube.com/watch?v=IG5VglS_sOo - How defender for cloud apps helps to block the file based on the labels.
Let me know if you have any further questions, feel free to post back.