Data Loss Prevention (DLP) Override is missing from Android and iOS Outlook client

Question

I have configured a Data Loss Prevention (DLP) policy in the Microsoft Purview Portal that requires users to provide a justification when attempting to share or send sensitive information (e.g., credit card numbers, PAN, driver’s license, or voter ID) externally via Outlook, Teams, OneDrive, or SharePoint. This override mechanism works as intended in both the Windows desktop Outlook client and Outlook on the web (OWA). However, in the Outlook mobile apps for Android and iOS, the override option is not available and messages containing sensitive data are blocked without prompting the user to provide a justification.

Is anyone else experiencing a similar issue? If so, have you found a solution?

Thank you in advance!

Answer 1

Hi Rugved,

It has been a while and I am writing to see how things are going with this issue. Have you had a chance to check the replies provided? Any update would be appreciated. 

If my answer is helpful, please mark it as an answer, which will definitely help others in the community who have similar queries to find solutions to their problems faster. Thank you for your understanding.  

Best Regards, 

Demi-N | Microsoft Community Support Specialist

Answer 2

Hi Rugved, 

Welcome to Microsoft Community and thank you for bringing this to our attention. 

Based on your description and recent discussions in Microsoft forums, the behavior you're experiencing is expected to improve. While Data Loss Prevention (DLP) policies configured in Microsoft Purview do support override prompts in Outlook for Windows and Outlook on the web (OWA), the mobile versions of Outlook for Android and iOS do not yet support the override justification prompt. Instead, messages containing sensitive information are blocked outright without offering users the ability to override. 

Microsoft has acknowledged this limitation, and while DLP policy tips are now supported in Outlook Mobile to some extent, the override functionality is still not fully aligned across platforms. 

This means that for now, mobile users will not be able to justify and override DLP blocks as they can on desktop or web clients. 

If this functionality is critical to your organization’s workflow, we recommend considering the following steps: 

• Communicate platform limitations to end users to avoid confusion.
• Encourage use of desktop or web clients when handling sensitive data that may trigger DLP policies.
• Submit feedback via Ideas · Community or open a support ticket with Microsoft to escalate the need for overriding support in mobile clients. This helps prioritize future development.

 

You may also find additional context in this related article: Data Loss Prevention policy tips reference | Microsoft Learn 

I hope the information above is helpful to you. Please feel free to reach out if you have any updates or need further assistance with DLP configuration across Microsoft 365 services. 

Best regards, 

Demi-N - MSFT | Microsoft Community Support Specialist.