AIP, DLP and eDiscovery

[Franck Marteaux]

I did some tests yesterday to verify some DLP and eDiscovery behavior for AIP protected documents:

a) DLP: I setup a DLP policy with a rule do prevent users from saving documents that are marked as "Streng Vertraulich" (Highly Confidential) on SharePoint, ODfB and send through Exchange.

I used a rule that looks at a file property and named the property "Sensitivity", with the Value "Streng Vertraulich" (see screenshot).

I activated the policy. ("Yes, turn it on right away").

Result: Saving these documents was not prevented, no warning messages to the user and not alert to the adminstrators.

Why is this policy not working?

What also bothered me was, that the Sensitivity property value was not listed in the Windows Explorer, see attached screenshot.

[#2]

@Franck Marteaux 

@Enrique Saggese: Is this something you can speak to? 

[#3]

@Franck Marteaux Ho Franck! Did the label you applied involve protection or not?

In labels without protection the label metadata is only encoded as an Office Document metadata (which you can see from within Office by going to File/Info/Properties). Only when you involve protection the labels are visible within Explorer.

We are working to integrate labeling with SPO so Office 365 DLP can act on labels whether the document is protected or not. We are also working to integrate labels in Explorer so the labels are visible as an Explorer column. We don't have ETA for this work to be complete, in the meantime unfortunately the results my not be consistent depending on whether the label applies protection or not. 

HTH

[#4]

Hi@Enrique Saggese , yes, most of the documents in the screenshot are protected, specifically the one "Gebäude" with the open properties dialog box.

Regards,
Franck