Mastering Records Management in Microsoft Purview: A Practical Guide for AI-Ready Governance

Microsoft Purview Records Management has become a critical priority for organizations adopting AI tools like Microsoft 365 Copilot. Because Copilot surfaces everything a user can access, including redundant, obsolete, and trivial (ROT) data, weak governance now directly translates into productivity loss, compliance risks, and potential legal exposure.

In a recent episode of All Things M365 Compliance, I joined Ryan John Murphy and Susan Lamb, Principal Data Governance SME at Infotechtion and former global records management lead at Shell, to explore how Microsoft Purview has evolved and what practical steps organizations must take to clean up their data estate.


Read More

Teams Private Channel Messages: Compliance Action Required by Sept 20, 2025

Teams private channel messages are moving to group mailboxes, and compliance managers must act before September 20, 2025, to avoid data loss and compliance gaps.

Microsoft is reengineering private channels to improve scalability and simplify governance. This change impacts Microsoft Purview eDiscovery, retention, and DLP policies.

This update was announced in the Microsoft Teams Blog and flagged in the Microsoft 365 Message Center (MC1134737).

📺 Prefer video? Watch the full episode on YouTube and subscribe for more updates!


Read More

Microsoft Purview DLP: Best Practices for Successful Implementation

Microsoft Purview Data Loss Prevention (DLP) is often misunderstood. Many organizations treat it as a quick fix, something that can be switched on in the portal. In reality, DLP is a strategic capability that requires planning, thoughtful policy design, and continuous improvement to be effective.

In a recent episode of the All Things M365 Compliance Podcast, Ryan John Murphy and I were joined by guest Ewelina Paczkowska, Solution Architect at Threatscape and author of the excellent Welkas World blog, to explore how organizations can maximize the value of Purview DLP.

This blog shares some of the best practices and lessons learned from our discussion.


Read More

How AI Is Reshaping Microsoft 365 Compliance: Insights from Rafah Knight

Microsoft 365 AI compliance is fast becoming a critical priority as artificial intelligence transforms how businesses operate. Tools like Microsoft 365 Copilot are reshaping productivity—but they also introduce new challenges for data governance, security, and regulatory alignment.

In a recent episode of the All Things M365 Compliance podcast, I joined Ryan John Murphy and Rafah Knight, founder of Secure AI, to explore how organisations can adopt AI responsibly within Microsoft 365. From mitigating shadow AI risks to aligning with the EU AI Act, we unpacked what legal, IT, and compliance teams need to know.

Here are the key takeaways for managing AI governance and compliance in the Microsoft 365 environment.


Read More

Microsoft Information Protection – In the Centre of It All! – Insights from the ‘All Things M365 Compliance’ Podcast

In today’s digital landscape, data security is critical, and Microsoft Information Protection sits at the centre of safeguarding sensitive information. By enabling organizations to classify, protect, and govern their data, Microsoft Purview Information Protection (MPIP) empowers businesses to apply sensitivity labels, encryption, and access controls across Microsoft 365 and beyond. This ensures consistent security and compliance in an increasingly complex regulatory environment.

In a recent All Things M365 Compliance podcast, Nikki Chapple, Ryan John Murphy, and Microsoft MVP Victor Wingsing explored the importance of data classification and sensitivity labels in Microsoft Purview. This blog captures their valuable insights and offers practical strategies for organizations looking to strengthen their data protection practices and mitigate security risks.


Read More

Mastering Microsoft Purview Exact Data Match: All Things M365 Compliance Podcast

What are the benefits of Microsoft Purview’s Exact Data Match (EDM)? This question is explored in the latest episode of the All Things M365 Compliance Podcast: Mastering Microsoft Purview Exact Data Match. In today’s world, where data breaches are becoming increasingly common, protecting your organization’s sensitive information is critical. However, traditional data classification methods often rely on patterns and keywords, which can lead to false positives and inefficiencies, complicating efforts to protect data. The advantage of EDM is that it provides a precise solution, enabling you to classify and secure your data using exact values from your structured sources, such as an employee list.

In this latest episode of the All Things M365 Compliance Podcast/Vodcast, Ewelina Paczkowska joins hosts Nikki Chapple and Ryan John Murphy to explore mastering Microsoft Purview’s Exact Data Match and discuss its benefits and practical functionality.


Read More

All Things M365 Compliance Podcast Ep 23: MPARR – Microsoft 365 Reporting

In Episode 23 of the All Things M365 Compliance Podcast, hosts Ryan John Murphy and Nikki Chapple explore the innovative Microsoft Purview Advanced Rich Reports (MPARR) with Sebastián Zamorano. MPARR takes Microsoft Purview’s standard reporting capabilities to the next level by using APIs to collect data on over 680 activities. The result? Users can create customized and detailed PowerBI reports that offer a comprehensive overview of your Microsoft 365 data landscape, providing a reassuringly thorough understanding of your data. This enhances your ability to manage and protect sensitive information and provides a clear understanding of your compliance posture.

You can read on to learn more about Microsoft Purview Advanced Rich Reports (MPARR) and watch or listen to the podcast.


Read More

Speaking at Teams Nation 2024 | February 2024

I had the opportunity to present a session at Teams Nation 2024 on 21 February 2024. Teams Nation is a free, community-driven online conference dedicated to Microsoft Teams, its underlying technologies, and extensibility options. It featured over 70 sessions across multiple tracks covering topics like Adoption & Governance, Security & Compliance, Productivity, Meetings & Calling, Education & Community, Build & Extend, Devices & Spaces, and The Power Platform.


Read More

All Things M365 Compliance podcast EP15: DLP Part 2

In part two of our “All Things M365 Compliance” Data Loss prevention (DLP) mini-series, Ryan John Murphy and Nikki Chapple show you how to use the Conditions Builder to create advanced policies and rules. Safeguard confidential information, prevent sensitive data from leaving your organisation, and establish a robust data loss prevention defence system for your organization.

Tune in to learn more.


Read More

All Things M365 Compliance podcast EP14: Data Loss Prevention (DLP) Part 1

In episode 14 of the “All Things M365 Compliance” podcast, Ryan John Murphy and Nikki Chapple demonstrate how to create Microsoft Purview Data Loss Prevention (DLP) policies and rules. The episode covers important topics like the structure of DLP policies and rules, why they are a crucial part of the design process, and what outcomes to expect.

Tune in to learn more.


Read More