Definition
Microsoft Purview Data Loss Prevention (DLP) detects and controls sensitive information sharing across supported locations.
How it works
Policies combine sensitive information types, conditions, actions and exceptions. Supported workloads can include Exchange, SharePoint and OneDrive, depending on licensing.
Real-world example
An organization can warn or restrict external sharing of a document containing financial identifiers, with business justification and audit records.
Limits and best practices
Start in test mode, measure false positives, train users and validate licensing, coverage and exceptions before enforcing blocking actions.
Technical detail to remember
Start with DLP simulation to identify legitimate documents matching sensitive-information patterns. Review confidence thresholds, exceptions and supported locations before enabling blocking.