How to Deploy Microsoft Purview DLP for Copilot and Generative AI

Organisations adopting Microsoft 365 Copilot and generative AI are facing a common challenge. Data is no longer static. It is constantly moving, reused, and now being surfaced and generated by AI.

This changes the risk profile.

The questions I hear most often are:

  1. What are the real data security risks with AI?
  2. Which controls actually make a difference?
  3. How do we deploy them effectively in Microsoft Purview?

This guide builds on my ECS 2026 session and focuses on the controls that provide the greatest practical value. It cuts through the noise and shows how to use Microsoft Purview DLP for Copilot and generative AI, with a practical approach to reducing real-world data leakage risk across both internal and external AI tools.


Read More

Teams Private Channel Messages: Compliance Action Required by Sept 20, 2025

Teams private channel messages are moving to group mailboxes, and compliance managers must act before September 20, 2025, to avoid data loss and compliance gaps.

Microsoft is reengineering private channels to improve scalability and simplify governance. This change impacts Microsoft Purview eDiscovery, retention, and DLP policies.

This update was announced in the Microsoft Teams Blog and flagged in the Microsoft 365 Message Center (MC1134737).

📺 Prefer video? Watch the full episode on YouTube and subscribe for more updates!


Read More

Microsoft Purview DLP: Best Practices for Successful Implementation

Microsoft Purview Data Loss Prevention (DLP) is often misunderstood. Many organizations treat it as a quick fix, something that can be switched on in the portal. In reality, DLP is a strategic capability that requires planning, thoughtful policy design, and continuous improvement to be effective.

In a recent episode of the All Things M365 Compliance Podcast, Ryan John Murphy and I were joined by guest Ewelina Paczkowska, Solution Architect at Threatscape and author of the excellent Welkas World blog, to explore how organizations can maximize the value of Purview DLP.

This blog shares some of the best practices and lessons learned from our discussion.


Read More

Enhance Your Data Security Strategies – IRMS Conference 2025

I’m deeply honoured to have delivered the closing keynote with Ryan John Murphy from Microsoft at the IRMS Conference 2025 – The Peaky Path to Progress | 18th – 20th May 2025 | Birmingham, UK an event that continues to be the beating heart of the information management community. With over 400 professionals from across sectors, this year’s theme, “The Peaky Path to Progress,” couldn’t have been more fitting.

As we navigate an era where data is both an asset and a liability, my session—“Protecting Your Sensitive Data with Microsoft Purview: Practical Information Protection and DLP Strategies”—focused on equipping organizations with the tools and mindset to climb their own digital mountains.


Read More

All Things M365 Compliance podcast EP15: DLP Part 2

In part two of our “All Things M365 Compliance” Data Loss prevention (DLP) mini-series, Ryan John Murphy and Nikki Chapple show you how to use the Conditions Builder to create advanced policies and rules. Safeguard confidential information, prevent sensitive data from leaving your organisation, and establish a robust data loss prevention defence system for your organization.

Tune in to learn more.


Read More

All Things M365 Compliance podcast EP14: Data Loss Prevention (DLP) Part 1

In episode 14 of the “All Things M365 Compliance” podcast, Ryan John Murphy and Nikki Chapple demonstrate how to create Microsoft Purview Data Loss Prevention (DLP) policies and rules. The episode covers important topics like the structure of DLP policies and rules, why they are a crucial part of the design process, and what outcomes to expect.

Tune in to learn more.


Read More