Forum Discussion

romatlo32's avatar
romatlo32
Copper Contributor
Apr 01, 2021

Apply AIP labels to existing data at scale?

Hi folks,

Does MS365 have the capability to apply a label to existing data in SPO and OD based on a Sensitive data scan?

 

For example

Sensitive Data:     Label:

SSN                      Confidential

PCI                       Confidential

Patents                 Top Secret

 

Thanks,

romatlo

  • Julian_Nwosu's avatar
    Julian_Nwosu
    Copper Contributor

    Hi romatlo32,

     

    You do have the ability to create an auto-labeling policy and target locations such as SPO and OD but right now it is limited in terms of scale as you can only add 10 sites to each auto-labeling policy and you are allowed to create no more than 10 of these policies per tenant. I hear that the limit will be increased in the future, but this is currently what it is.

     

    For each auto-labeling policy you can choose a label (ex: Confidential) to auto apply based on rules (conditions) that are met. So in your case you can create a rule with a condition equal to 'Content that contains any of these sensitive info types"

     SSN

     PCI (You may have to individually select the sensitive information types that are predefined (over 200 to choose from) or create your own if necessary)

     

    Select SPO and OD locations

     

    You'd then have to create another auto-labeling policy --> Choose a label(ex: Top Secret) to auto apply --> create a rule with a condition equal to 'Content that contains any of these sensitive info type(s)':

     

    Patent

     

    Select SPO and OD locations

     

    This will apply to content that is already saved (and future content) in SPO and OD if it matches the conditions of the rules you define.

     

    I've included a link below to Microsoft documentation that discusses this in greater detail. Hope this Helps!

     

    - Julian

     

     

    https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

     

    • romatlo32's avatar
      romatlo32
      Copper Contributor

      Julian_Nwosu 

       

      Thank you!  Sounds like you are confirming for auto labeling for new documents, correct?

      I am also referring to existing data (before a labeling policy) that has no label at all.  Could we also label that existing data?

Resources