Hi LarryBurns-3399,
Thank you for reaching out to us on the Microsoft Q&A platform and apologies for the confusion caused by the statement. The key point here is that the email contains 16 unique credit card numbers that match a single DLP Policy rule. This means that the email as a whole is considered one match, not each credit card number individually.
The DLP Policy matches report will display one line for each match, and in this case, there is only one match - the email that contains the 16 unique credit card numbers.
So, the correct answer is indeed: 1 The report will display only one line, which represents the email that matched the DLP Policy rule, regardless of the number of recipients it was sent to or the number of credit card numbers it contains. The DLP report counts each email containing sensitive info as one rule match. So, it's still just 1 line. If you have any additional questions, please let us know in the comments. We’re happy to assist further.
If you found the answer helpful, please click on Upvote and Accept Answer. This will help other community members.