Edit

What's new in Microsoft Purview risk and compliance solutions

  • Article

Whether it be adding new solutions to the Microsoft Purview compliance portal, updating existing features based on your feedback, or rolling out fresh and updated documentation, Microsoft 365 helps you stay on top of the ever-changing compliance landscape. Take a look below to see what's new in Microsoft Purview today.

Note

Some compliance features get rolled out at different speeds to our customers. If you aren't seeing a feature yet, try adding yourself to targeted release.

Tip

Interested in what's going on in other admin centers? Check out these articles:

And visit the Microsoft 365 Roadmap to learn about Microsoft 365 features that were launched, are rolling out, are in development, have been cancelled, or previously released.

Tip

If you're not an E5 customer, use the 90-day Microsoft Purview solutions trial to explore how additional Purview capabilities can help your organization manage data security and compliance needs. Start now at the Microsoft Purview compliance portal trials hub. Learn details about signing up and trial terms.

May 2023

Compliance Manager

Data lifecycle management and records management

  • General availability (GA): Simulation mode for auto-apply retention label policies is now generally available.
  • General availability (GA): Auto-labeling retention policies for cloud attachments that are shared via Exchange or Teams are now generally available. Cloud attachments shared via Yammer remain in preview.

Insider risk management

Microsoft Priva

  • Updates to Get started with Priva: insights for the data minimization policy begin surfacing within three days after starting Priva for data that hasn't been modified within the last 30 days.
  • Updates to Find and visualize personal data in Priva for the privacy regulations card, which pulls in insights from Compliance Manager.

Sensitivity labels

  • Rolling out: PDF support for Office on the web so that when Word, Excel, and PowerPoint converts a labeled Office document into a PDF document, the label with any content markings persists.

April 2023

Communication compliance

Compliance Manager

  • Updated regulatory templates list with templates Turkey - Information and Communication Security Guide and SA - Saudi Arabia Monetary Authority (SAMA) & National Cybersecurity Authority (NCA).

Data lifecycle management and records management

  • In preview: Scan for sensitive information in images with support for optical character recognition when you use auto-apply retention label policies.
  • In preview: Auto-labeling retention policies for cloud attachments that were already in preview now include attachments and links shared in Yammer.
  • In preview: Support for Azure Active Directory administrative units—for both data lifecycle management and records management—is starting to roll out.
  • In preview: You can now optionally configure auto-approval when you configure a retention label for disposition review.

Data loss prevention

Insider risk management

Microsoft Priva

Sensitivity labels

March 2023

Audit

  • Updates for UserKey and UserType schema values to address scenarios for enumeration for audit records generated by guest users and to remove ambiguity for accepted data.
  • Updates for audit search records and activities related to Microsoft Defender for Identity (MDI).
  • Updates for new audit log fields added to support Microsoft Purview Information Protection.
  • Updates for across all audit content for new UTC support in audit solutions.
  • Updates for all events that are logged for the Updates app activities in Teams in the audit log.

Communication compliance

Data lifecycle management and records management

  • General availability (GA): Rolling out in general availability, Microsoft Graph records management APIs to support the management of retention labels and event-based retention.
  • In preview: Auto-labeling retention policies for cloud attachments that were already in preview are now gradually rolling out support for URL text links.
  • Improvements for Teams retention policies: Now rolling out, support for existing call data records as well as newly created call data records, and support for the control message events that name and rename a chat.
  • Improvements that support Power Automate flows: Now rolling out to support the scenario of customizing what happens at the end of the retention period, the existing Power Automate compliance actions have been renamed to more accurately describe their purpose. Apply label on the item is renamed Relabel an item at the end of retention, and Deletes the item is renamed Deletes an item at the end of retention. Additionally:
    • New compliance action to improve the resilience of your flow.
    • The trigger action When the retention period expires is renamed When an item reaches the end of its retention period.
    • New compliance action of Apply a retention label on the item to apply a retention label independently from this scenario, as if manually applying a label. The label doesn't need to be published and the retention label is applied immediately. Just like manually applying a retention label, an existing retention label will be overwritten.

Data loss prevention

Device onboarding

eDiscovery

Information barriers

  • New article: Added new article to support the new multi-segment mode in information barriers. The multi-segment mode enables you to assign users in your organization to up to 10 segments in information barriers instead of being limited to just one segment. This allows support for more diverse communication rules between individuals and groups to support more complex organizational and operational scenarios.
  • Clarifications for hidden/disabled/guest user accounts and the HiddenFromAddressListEnabled parameter.
  • Updates for information barriers policy application and the background processor in Microsoft Teams.

Insider risk management

Microsoft Priva

Permissions

  • Clarifications for role group support for security groups and blocked and unblocked groups.

Sensitivity labels

  • AIP add-in disabled by default: Now rolling out, the AIP add-in for Office apps is disabled by default with version 2302. Starting with this version, you must configure an Office setting if you need to continue to use the Azure Information Protection (AIP) add-in rather than the labels that are built into Office apps.
  • General availability (GA): For Windows, the sensitivity bar and label colors are now generally available for Word, Excel, PowerPoint, and Outlook.
  • General availability (GA): Both Outlook for Windows and Outlook for Mac are rolling out in general availability for protected meetings.
  • General availability (GA): Now in general availability for built-in labeling for Windows, support for a default sublabel for a parent label as a parity feature for the AIP add-in.
  • General availability (GA): For labeling built into Windows, macOS, iOS, and Android, auditing actions for sensitivity labels include encryption details such as a change in the encryption status and settings, and the Rights Management owner.
  • In preview: The ability to scope labels to files and emails, so that, for example, a sensitivity label is visible to users in Outlook but not in Word, Excel, or PowerPoint. This configuration can be used as a parity feature for the AIP add-in, which could be disabled per app.
  • In preview: Prevent oversharing of labeled emails as a DLP policy tip. This DLP policy configuration is an equivalent for the AIP add-in with PowerShell advanced settings that implement pop-up messages in Outlook that warn, justify, or block emails being sent.
  • In preview: As a parity feature for the AIP add-in, built-in labeling for Windows supports label inheritance from email attachments.
  • In preview: Preview versions of Outlook for Mac now support label colors but don't yet support the sensitivity bar.
  • In preview: For mandatory labeling, Outlook for Android in the Beta Channel supports a setting that you can configure with Microsoft Intune to prompt users to select a sensitivity label when they first compose an email instead of when they send it.
  • In preview: Now rolling out in preview to SharePoint and Teams, users can select and change a sensitivity label from the details pane from these apps when sensitivity labels are enabled for Office files in SharePoint and OneDrive.
  • Removal of restrictions for prevent copying chat for protected meetings: The label setting that prevents copying chat to the clipboard now supports users outside your organization and also users who join a chat but weren't invited to the meeting.
  • Ability to turn off the default sensitivity label for SharePoint document libraries: If you don't want SharePoint site admins to be able to configure a default sensitivity label for SharePoint document libraries, you can now turn off this feature as a tenant-level setting.

February 2023

Audit

Communication compliance

Data lifecycle management and records management

  • Rolling out in preview: Auto-labeling retention policies now support simulation mode, so you can test out your policy configuration and view results before deploying in production.
  • Configuration improvements: The configuration for retention policies and retention label policies in the Microsoft Purview compliance portal has been improved for the selection and configuration of locations. Some of the location names have changed to better reflect what's included for the location, and a new Applicable Content column is added for additional information.
  • Relocation for adaptive scopes: The configuration and management of adaptive policy scopes is moving to a new location in the Microsoft Purview compliance portal: Roles & Scopes > Adaptive scopes.
  • New troubleshooting resources:

Data Loss Prevention

eDiscovery

Information barriers

Insider risk management

On-premises scanner

Permissions

Sensitivity labels

  • General availability (GA): Protected meetings by labeling calendar invites and responses, Teams meetings, and chat. Although Outlook for Mac is now rolling out in general availability, Outlook for Windows remains in preview for this scenario.
  • General availability (GA): For Windows, built-in labeling supports organization-wide custom permissions as a parity feature for the AIP add-in.
  • In preview: Support for Azure Active Directory administrative units.
  • In preview: Previously available in preview for Word, Excel, and PowerPoint, the sensitivity bar with support for label colors is now also in preview for Outlook on Windows.
  • In preview: Now supported for labeling built into Windows, macOS, iOS, and Android, auditing actions for sensitivity labels include encryption details such as a change in the encryption status and settings, and the Rights Management owner.
  • New Office setting: Available with Group Policy and the Cloud Policy service for Microsoft 365, a new setting if you need to disable the PDF support in Office apps for Word, Excel, and PowerPoint.
  • Rolling out: In the Microsoft Purview compliance portal, the horizontal tabs for Overview, Labels, Label policies, and Auto-labeling now display as vertical options in the left navigation pane when you expand Information protection.

January 2023

Audit

Communication compliance

Compliance Manager

eDiscovery

Insider risk management

Microsoft Priva

  • Two additional roles are now permitted to start a Priva trial: Compliance Admin and Info Protection Admin.
  • There are new recommended alert settings (in preview) in Privacy Risk Management policies that allow users to choose more actionable and relevant alerts to reduce noise and alert fatigue.
  • There are new Compliance Manager improvement actions related to Priva (in preview); see these instructions for how to access Compliance Manager and how to see the actions.
  • Updates for creating a subject rights request:
    • During the custom setup process, it's now optional to enter the data subject's name. A new flyout pane lets you add more identifiers.
    • When refining your search, a new Conditions flyout pane appears during search refinement lets users set multiple search conditions at once.
  • Update to clarify that a subject rights request will automatically pause at the data estimate stage if over 10K items or 100 GB of data are likely to be retrieved.
  • Updates for reviewing data and collaborating on subject rights requests:
    • There are new filtering options when reviewing data, including keywords supporting multiple words and wildcard.
    • The "Plain text" view in the content review area now highlights all the data subject identifiers provided.
    • Clarifications that the search function in the annotate view can jump to search results within the view.
    • Individual collaborators can now be removed from dedicated Teams channel

Sensitivity labels

  • Rolling out in preview: As a parity feature for the AIP add-in, built-in labeling for Windows supports the configuration of a default sublabel for a parent label.
  • Rolling out in preview: Word, Excel, and PowerPoint in Office for Mac also supports the sensitivity bar and label colors.
  • The earliest version for the AIP add-in to be disabled by default in Office apps for the Current Channel and Monthly Enterprise Channel is now version 2302. The minimum version for the Semi-Annual Channel hasn't changed.

December 2022

Communication compliance

Compliance Manager

Data lifecycle management and records management

Insider risk management

Microsoft Priva

  • Tags for reviewing data in a subject rights request provide greater flexibility. There are now two default tags and 21 custom tags that can be named and defined by an organization. Tags can now be applied to, or removed from, multiple content items at once.
  • The maximum file size for file import during data review for a subject rights request has increased to 500 MB.
  • Instructions for working with the action execution log report for a delete request have been updated; including a clarification that its retention period is the same as all other subject rights request reports.

Sensitivity labels

November 2022

Audit

Communication compliance

Compliance Manager

  • New role-based access to assessments allows you to assign users roles for viewing and managing individual assessments.
  • Working with improvement actions - clarified that users need a Compliance Manager Assessor role in order to edit improvement action testing notes, and that roles can now be assigned for individual assessments.

eDiscovery

Insider risk management

Microsoft Priva

On-premises scanner

  • General availability (GA): Configuration for the Microsoft Purview Information Protection scanner (formerly named Azure Information Protection unified labeling scanner) in the Microsoft Purview compliance portal. For more information, see Configure & install the information protection scanner.

Sensitivity labels

  • General availability (GA): Trainable classifiers for auto-labeling policies. Trainable classifiers are now available for both auto-labeling for Office apps that use label settings (known as client-side auto-labeling) and auto-labeling policies (known as service-side auto-labeling). As a result, trainable classifiers are removed from the comparison table that lists only the differences between the two auto-labeling methods.

  • The automated email that has the subject Incompatible sensitivity label detected for when there's a labeling mismatch for a site now contains a link to an internal troubleshooting guide that you must specify as a URL with the LabelMismatchEmailHelpLink parameter from Set-SPOTenant.

  • If you need to, you can now disable co-authoring for your tenant by using PowerShell.

October 2022

Audit

  • Audit New Search - users can now run 10 concurrent audit search jobs with a max of one unfiltered search job, and review the progress %, result number, and job status in the UI. Historical search jobs results are now stored for 30 days and can be accessed after completion.)

Communication compliance

  • In preview: New communication compliance integration with insider risk management. Communication compliance can now provide risk signals detected in messages to insider risk management policies. Risky users detected in messages by the communication compliance policy act as a triggering event to bring users into scope for the insider risk management policies.

Data loss prevention

eDiscovery

Insider risk management

  • In preview: Insider risk management introduces forensic evidence, which enables customizable visual activity capturing across devices to help your organization better mitigate, understand, and respond to potential data risks like unauthorized data exfiltration of sensitive data.
  • In preview: Insider risk management integration with communication compliance when using the Data leaks by risky users or Security policy violations by risky users policy templates. Communication compliance can now provide risk signals detected in messages to insider risk management policies.
  • In preview: New inline alert customization allows analysts and investigators to quickly edit policies when reviewing alerts.
  • New priority content scoring updates that allow you to choose whether to assign risk scores to all activities detected by a policy or only activities that include priority content.
  • Security teams are now able to customize a security trigger in the 'data leaks' policy to surface when a user performs a sequence, enabling them to respond to user actions that might be considered riskier.
  • New updates now allow security teams to create policies with sequences without any other required underlying policy indicator selections.

Data lifecycle management and records management

Microsoft Priva

  • In preview: Data transfer policies in Privacy Risk Management now offers additional flexible boundary conditions: detecting transfers based on users' Azure Active Directory attributes, transfers between users in different Microsoft 365 groups, and transfers between SharePoint sites.

On-premises scanner

Sensitivity labels

Trainable classifiers

September 2022

Communication compliance

  • Get started with communication compliance: New updates for recommended actions and accelerated onboarding. Recommended actions can help your organization quickly get started with communication compliance.
  • Investigate and remediate communication compliance alerts: New update for keyword highlighting support for plain text view. Keyword highlighting, which is currently available for English language only, can help direct you to the area of interest in long messages and attachments.
  • Use communication compliance reports and audits: Clarifications on permissions needed to view and manage communication compliance reports. To view and manage reports, users must be assigned to the Communication Compliance Viewers role group.

Compliance Manager

Data Classification

  • Increase classifier accuracy (preview) - This article shows you how to confirm whether items matched by a classifier are true positive (a Match) or a false positive (Not a match) and provide Match, or Not a match feedback. You can use that feedback to tune your classifiers to increase accuracy. You can also send redacted versions of the document and the Match, Not a Match feedback to Microsoft if you want to help increase the accuracy of the classifiers that Microsoft provides.

Data lifecycle management and records management

  • In preview: Retention labels now support running a Power Automate flow at the end of the retention period to support custom actions and integration with other solutions. For more information, see Customize what happens at the end of the retention period.
  • For records management items undergoing disposition review, when you select that item in the Disposition area of the compliance portal, a new Progress column displays the item's status. That status can be "Approved for deletion, 'Awaiting deletion from SharePoint/OneDrive' or 'Awaiting deletion from Exchange', or "Permanently Deleted". When an item is approved for permanent deletion as part of the disposition review process, that deletion can take up to 15 days to complete and this new column helps you to track its progress.
  • The configuration to enable a mailbox for archiving is moving to the new Exchange admin center (EAC) and instructions have been updated accordingly.
  • Currently, trainable classifiers for auto-apply retention labels aren't supported with adaptive scopes. As a workaround, use static scopes for this configuration combination.
  • Instructions to Customize an archive and deletion policy for mailboxes are updated to include only retention tags that have an outcome that can't be achieved with Microsoft 365 retention.

Data loss prevention

Sensitivity labels

  • PDF support in Word, Excel, and PowerPoint is now available to Windows Current Channel and Monthly Enterprise Channel.
  • Default label for existing documents is now fully rolled out to Mac and Windows in Current Channel and Monthly Enterprise Channel, providing parity with the AIP add-in.
  • In preview: The new sensitivity bar and support for label colors in Office apps, providing parity with the AIP add-in with additional functionality.
  • In preview: S/MIME support for Windows, providing parity with the AIP add-in. Support for Mac and mobile is now fully rolled out.
  • In preview: Trainable classifiers for auto-labeling policies (all workloads).

Trainable classifiers

  • Trainable classifiers definitions - more than 20 new classifiers have been added, so the definitions for all trainable classifiers have been broken out into this new article.