Office 365 DLP Provides Limited Protection

• Office 365 Data Loss Prevention may help an organization identify, protect, and monitor some sensitive data.
• It only protects data processed and stored through Exchange Online, SharePoint Online, and OneDrive for Business.
• Because it does not protect data with all Office 365 products and services, additional Data Loss Prevention solutions will be required.

Office 365 Data Loss Prevention (DLP) may help prevent some unauthorized dissemination of an organization’s sensitive data. Office 365 DLP can detect, classify, protect, and monitor some sensitive data, such as credit card data, that was created, processed, or stored using some Office 365 products and services. However, not all Office 365 products and services honor Office 365 DLP, meaning other DLP solutions from Microsoft, such as Azure Information Protection, or third-party solutions will be required for complete protection of sensitive data on all devices and with all applications.

Office 365 DLP

Office 365 DLP uses policies that describe sensitive data patterns and the action to take when they are detected to protect sensitive data with Exchange Online, OneDrive for Business, and SharePoint Online. Microsoft provides templates for some 82 sensitive data types that fall under common privacy regulations, such as financial, medical and health, and personal data, as well as the ability to create custom sensitive information types for the organization’s unique data (such as employee identification numbers). An Office 365 DLP policy can be applied to all locations (Exchange Online, OneDrive for Business, or SharePoint Online) or a specific location (a specific Exchange Online distribution group, a specific account for OneDrive for Business, or a specific SharePoint Online site).