Microsoft 365 Message Center item MC1293479
MC1293479 - (Updated) Microsoft Purview | Data Loss Prevention: New guided diagnostics experience for DLP
Microsoft Purview Data Loss Prevention will introduce a new guided diagnostics experience by October 2026, enhancing visibility into DLP policy evaluation and actions. Eligible tenants get Security Copilot-powered insights for troubleshooting and optimization. Existing policies and enforcement remain unchanged, with no impact on user workflows.
- Message Center ID
- MC1293479
- Category
- stay Informed
- Severity
- normal
- Services
- Microsoft Purview
- Tags
- Updated message, New feature, User impact, Admin impact
- Roadmap ID
- 561032
- Platforms
- Web
- Published
- 2026-04-27
- Last updated
- 2026-08-04
- Expires
- 2026-11-30
Updated August 4, 2026: We have updated the timeline. Thank you for your patience. [Introduction]Microsoft is introducing a new guided diagnostics experience in Microsoft Purview Data Loss Prevention (DLP) to help administrators diagnose and resolve DLP policy issues more efficiently. This experience provides clearer visibility into how DLP policies are evaluated, which conditions are matched, and what actions are taken. For eligible tenants, Security Copilot‑powered insights offer recommendations to support troubleshooting and policy optimization.This message is associated with Microsoft 365 Roadmap ID 561032.[When this will happen]Public Preview: Early September 2026General Availability (Worldwide): We expect to begin rolling out October 2026.[How this affects your organization]Who is affectedMicrosoft 365 administrators who manage Microsoft Purview DLP policiesCommercial tenantsSecurity Copilot‑powered insights are available only to customers with eligible Microsoft 365 E5 and Copilot licensingWhat will happenA new guided diagnostics experience will be available in the Microsoft Purview portal to help troubleshoot DLP policy behavior.The diagnostics will be available to all users who have permission to view DLP policies.Admins will see a new guided diagnostics experience in the Microsoft Purview portal for troubleshooting DLP issues.Diagnostics provide visibility into:DLP policy evaluation orderConditions that were matchedActions taken (allow, block, audit)Eligible tenants will receive Copilot‑powered insights and recommendations to assist with:Identifying potential policy misconfigurationsTroubleshooting DLP behaviorPolicy optimizationExisting DLP policies and enforcement behavior are not changed.There is no impact to user workflows.[What you can do to prepare]No action is required.Optionally:Review internal DLP troubleshooting documentation and update it to reference the new diagnostics experience.Ensure security and compliance teams are aware of the new diagnostics flow in the Microsoft Purview portal.Review Copilot licensing to understand availability of Security Copilot‑powered insights.(Documentation links will be provided once public preview documentation is available.)[Compliance considerations]QuestionAnswerDoes the change introduce or significantly modify AI/ML or agent capabilities that interact with or provide access to customer data?Yes. The guided diagnostics experience includes Security Copilot-powered insights and recommendations for eligible tenants. These insights analyze existing DLP configuration data and diagnostic metadata to help administrators understand policy behavior, troubleshoot issues, and identify opportunities for policy optimization. No new customer content sources are introduced, and Copilot does not change DLP enforcement decisions.Does the change alter how admins can monitor, report on, or demonstrate compliance activities (for example, in Microsoft Purview reporting or diagnostics)?Yes. The new guided diagnostics experience enhances how administrators can monitor and understand DLP policy evaluation, including visibility into evaluation order, matched conditions, and resulting actions. This improves troubleshooting and compliance validation workflows without changing audit logs or enforcement behavior.