🎙️ New podcast episode just dropped!
We’re diving into Smarter Insider Risk Coverage with Microsoft Purview together with Pip & Mara, breaking down what’s new, why it matters, and how it can help organizations stay ahead of insider risks.
If you’re working in security, compliance, or Microsoft 365, this one’s definitely worth a listen 👇
▶️ Watch now on YouTube
Stay tuned…
Microsoft has officially moved Data Security Posture Management (DSPM) in Microsoft Purview from preview to general availability (GA) and that’s a big step forward for organizations looking to strengthen how they protect sensitive data.
At its core, DSPM helps you understand where your data risks really are, giving you better visibility across your Microsoft 365 environment. Instead of piecing things together manually, you get clear insights, risk signals, and practical recommendations to help improve your overall data security posture.
This release is part of Microsoft’s ongoing investment in enterprise-grade security and compliance tools, making it easier to protect data at scale without added complexity.
One of the key additions in this GA release is the Data Security Posture Agent, now fully available.
With it, you can:
The transition from preview to GA is seamless—your existing configurations stay as they are, and there’s no need to reconfigure policies or settings.
The feature will become available based on your organization’s Microsoft Purview deployment timing.
This update is especially relevant for:
Basically anyone responsible for managing or protecting data within Microsoft 365 using Microsoft Purview.
Good news, no action is required to enable this feature.
That said, it’s a great opportunity to take advantage of what DSPM offers. You might want to:
Microsoft Purview is rolling out a great new capability for SharePoint and OneDrive: automatic actions for sensitivity labels.
Until now, if someone manually applied the wrong label to a file, admins had limited options—especially when large volumes of content were involved. With this update, Purview can now automatically override or remove manually applied sensitivity labels when they don’t match your organization’s policies.
In simple terms:
Your data stays correctly classified, even when humans make mistakes.
Rollout begins mid‑April 2026, and the feature will be off by default, giving administrators full control over when and how they want to enable it. It’s another step toward stronger, more accurate data governance across Microsoft 365.
Microsoft Purview is getting a meaningful upgrade as part of its ongoing integration with Microsoft Defender for Cloud Apps. The latest improvement brings new auto‑labeling actions to SharePoint and OneDrive, giving organizations more control over how sensitive information is classified across their environment.
What’s new?
Admins can now automatically override sensitivity labels that were applied manually or remove labels entirely when a file no longer meets the criteria for that classification. This means large volumes of content can stay properly labeled—even as information changes—without relying on users to update labels themselves.
This update appears under Microsoft 365 Roadmap ID 558342.
📅 Rollout Timeline
A fast rollout for a very impactful capability.
This update mainly affects:
Admins will now see new actions inside the auto‑labeling configuration panel in the Purview portal.
Auto‑labeling policies can now:
Even if a user applied the label manually, Purview can replace it if the file meets a different policy condition.
If a file no longer qualifies for a certain label, Purview can automatically strip it from the document.
These changes affect existing content already stored in:
Nothing changes until an admin enables these new actions.
By default, the feature is off.
Compliance Considerations
| Area | What It Means |
|---|---|
| Does this change how customer data is processed? | Yes—files in SharePoint and OneDrive may now have labels automatically overridden or removed based on rules you configure. |
| Does this modify Information Protection capabilities? | Yes—it expands auto‑labeling to include overriding manual labels and removing specific labels. |
| Does this affect monitoring or compliance evidence? | Yes—it improves consistency and auditability because label changes follow formal Purview policies. |
| Is there an admin control? | Absolutely. Admins must explicitly configure these new actions in Purview. Nothing changes automatically. |