Teams Private Channel Messages: Compliance Action Required by Sept 20, 2025

Changes To Teams Private Channel Messages Storage. Image Shows Where Are Microsoft Teams Messages Stored For Compliance Purposes Before And After The Change.

Teams private channel messages are moving to group mailboxes, and compliance managers must act before September 20, 2025, to avoid data loss and compliance gaps.

Microsoft is reengineering private channels to improve scalability and simplify governance. This change impacts Microsoft Purview eDiscovery, retention, and DLP policies.

This update was announced in the Microsoft Teams Blog and flagged in the Microsoft 365 Message Center (MC1134737).

📺 Prefer video? Watch the full episode on YouTube and subscribe for more updates!

Why Teams Private Channel Compliance Matters

Before migration:

  • Private channel messages stored in individual user mailboxes

After migration (Sept 20 onward):

  • Private channel messages stored in the team’s group mailbox
Changes To Teams Private Channel Messages Storage. Image Shows Where Are Microsoft Teams Messages Stored For Compliance Purposes Before And After The Change.
Where are microsoft teams messages stored for compliance purposes before and after the change.

Why this matters for compliance:

Policies scoped only to user mailboxes will no longer apply to new private channel messages after migration.
For full technical details, see the official Microsoft Teams announcement.

Migration of historical data

⚠️ The latest version of private channel message data from each user’s mailbox is moved to the group mailbox. For users under a retention or eDiscovery or Legal hold the Message edits and deleted messages will not be copied to the group mailbox but remain in preserved library folder of the user mailboxes until the hold expires.

Why Microsoft is making this change:

  • Increase scalability (up to 1000 private channels per team, 5000 members each)
  • Align compliance with shared channels
  • Enable new features like scheduling meetings in private channels

Compliance Risks if You Do Nothing

AreaBefore MigrationAfter MigrationRisk
eDiscovery & Legal HoldMessages in user mailboxesMessages in group mailboxHolds/searches scoped only to users will miss new content
DLPDLP scoped to user mailboxesDLP scoped to group mailboxSensitive data in private channels could bypass detection
RetentionRetention applied to user mailboxesRetention must apply to group mailboxNew content may not meet regulatory retention requirements

Example: During a regulatory investigation, if your legal team searches only user mailboxes, post-migration private channel data will be excluded, weakening evidence collection.


Key Actions for policies and holds scoped to Teams Private Channel Messages

✅ 1. eDiscovery & Legal Hold

  • Before migration:
    • If a legal hold exists for a private channel, apply it to the team’s group mailbox in addition to user mailboxes.
  • After migration:
    • For complete eDiscovery, include both user mailboxes (pre-migration) and group mailboxes (post-migration).
    • Note: For users under hold the Message edits and deleted messages will not be copied to the group mailbox but remain in user mailboxes until the hold expires.

“If you had Sally’s mailbox on hold because of private channels, that data will move to the group mailbox. If the team isn’t on hold, you risk data loss.” – Nikki Chapple


✅ 2. Retention Policies

  • Before migration:
    • Apply retention to the team’s group mailbox for Teams channel messages.
  • After migration:
    • You cannot create new private channel-specific policies.
    • Existing private channel policies become read-only but can be deleted.
    • Policies applied to the team’s group apply to all channels in the team.

“If retention policies aren’t aligned, data could be deleted irrecoverably once migration starts.” – Nikki Chapple


✅ 3. DLP Policies

  • Before migration:
    • Modify “Teams chat and channel messages” policies to include the team’s group in addition to user mailboxes.
  • After migration:
    • Ensure DLP policies are scoped to the team’s group mailbox.

“If you’re using automation or third-party tools for holds and communications, make sure they’re updated to reflect the new data location. Otherwise, your DLP and compliance workflows could break.” – Ryan John Murphy


Action Checklist: What You Must Do Before Sept 20, 2025

✔ Monitor Message Center (MC1134737) for updates
✔ Update eDiscovery holds to include group mailboxes
✔ Review and align retention policies
✔ Update DLP policies for Teams
✔ Validate migration using Microsoft’s upcoming PowerShell command
✔ Document all changes for audit readiness


Other Enhancements to Private Channels

  • Up to 1000 private channels per team (previously 30)
  • 5000 members per private channel (up from 250)
  • Schedule meetings in private channels
  • Unified compliance management via team’s group mailbox

Timeline

  • Migration starts: Late September 2025
  • Migration completes: By mid-December 2025 (tenant rollout timing may vary)

FAQs

How can admins identify a user’s private channel memberships?

Use Teams Admin Center or PowerShell: Get-TeamChannelUser.

Why isn’t Microsoft automatically applying policies from user mailboxes to the group?

It is up to organizations to decide the right scope for their policies and holds.

What happens to existing retention policies for private channels?

They become read-only. You can delete them but not edit them.

Do I need to update my eDiscovery cases?

Yes review all open cases. Add group mailboxes for any teams with private channels under investigation. For users under hold the Message edits and deleted messages will not be copied to the group mailbox but remain in user mailboxes until the hold expires. So keep the existing holds on the user mailbox.

Will old private channel data move automatically?

Yes, but message edits and deleted messages remain in user mailboxes.

Will I be able to track the progress of the migration?

Microsoft will be releasing a PowerShell command to check whether their migration has started or is completed.


More information

Watch or Listen to the full episode

📺  YouTube 👉 All Things M365 Compliance – Teams Private Channel Changes

🎧 Listen 👉 Teams Private Channel Changes and Purview. Act before 20.09! – All Things M365 Compliance | Podcast on Spotify

Read the announcement on the Teams Private Channel changes here Microsoft Teams Blog

As an admin, follow the Microsoft 365 Message Center change, number MC1134737.

📖 Want to know more about what data is stored where? Read my blog on Ultimate Guide: Microsoft 365 Data Storage Locations



💡 Want More Insights? Stay Updated!

🔐 Stay ahead in Microsoft 365 security, compliance, and governance with expert advice and in-depth discussions.

📺 Watch on YouTube:

All Things M365 Compliance – Dive into the latest discussions on Microsoft Purview, data security, governance, and best practices.

🎧 Listen on Spotify:

All Things M365 Compliance – Your go-to resource for deep dives into Microsoft Purview, DLP, Insider Risk Management, and data protection strategies.

📌 Follow Me for More Insights:

  • 🔹 LinkedIn: Nikki Chapple – Connect for updates, discussions, and articles.
  • 🔹 Bluesky: @nikkichapple – Join the conversation on compliance and data security.
  • 🔹 Twitter/X: @chapplenikki – Stay up-to-date with quick insights on M365 security and governance.

📌 Explore More on My Website:

nikkichapple.com – Discover more blog posts, resources, and stay at the forefront of Microsoft 365 compliance and security trends.

💬 Let’s Connect!

Have questions about Microsoft 365 security or compliance? Reach out to me, share your thoughts, or join the conversation! 🚀

Keep Reading

PreviousNext