📢 Microsoft Purview Endpoint DLP is getting smarter about archive files.
Microsoft is expanding Endpoint Data Loss Prevention (DLP) to detect sensitivity labels on files stored inside archives, such as ZIP and other supported container formats.
🔍 Why does this matter?
Sensitive information doesn't always exist as a standalone document. Users may compress labeled files into archives before copying, transferring, or sharing them.
With this enhancement, Endpoint DLP will gain better visibility into the sensitivity of content inside archive files, helping administrators apply more accurate DLP policies and protection controls.
This should provide:
- Better detection of sensitivity-labeled content inside archives
- More accurate DLP policy evaluation
- Greater control over how archived sensitive information is handled
- Improved protection against potential data leakage
Microsoft Purview DLP already supports using sensitivity labels as conditions for identifying sensitive content on devices. This enhancement extends that visibility further into archive scenarios.
📅 Current Microsoft roadmap:
Preview: December 2026 Rollout: January 2027 Roadmap ID: 566617
💡 Bottom line: Compressing a sensitive file shouldn't create a visibility gap. This update brings Endpoint DLP closer to maintaining protection even when labeled content is packaged inside an archive.
