Enforcing documents marked with certain sensitive labels to be stored in certain locations only.

%3CLINGO-SUB%20id%3D%22lingo-sub-964006%22%20slang%3D%22en-US%22%3EEnforcing%20documents%20marked%20with%20certain%20sensitive%20labels%20to%20be%20stored%20in%20certain%20locations%20only.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-964006%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20O365%20E3%20environment%20which%20is%20configured%20to%20use%20DLP%20sensitivity%20and%20retention%20labels.%3C%2FP%3E%3CP%3EI%20am%20then%20assigning%20sensitivity%20labels%20on%20word%20documents%20(%20using%20office%20app%20on%20windows)%20and%20then%20save%20the%20document%20in%20SharePoint%20online.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EClient%20requirement%20is%20to%20enforce%20that%20documents%20marked%20with%20certain%20sensitive%20labels%20can%20be%20stored%20only%20in%20a%20specific%20location(libraries)%20in%20SharePoint%20and%20not%20anywhere.%20How%20can%20i%20enforce%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-964960%22%20slang%3D%22en-US%22%3ERe%3A%20Enforcing%20documents%20marked%20with%20certain%20sensitive%20labels%20to%20be%20stored%20in%20certain%20locations%20only.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-964960%22%20slang%3D%22en-US%22%3EYou%20could%20use%20Cloud%20App%20Security.%20Using%20a%20File%20Policy%20you%20can%20check%20if%20a%20file%20has%20a%20certain%20sensitive%20label.%20If%20it%20doesn't%2C%20delete%20that%20file%3C%2FLINGO-BODY%3E
New Contributor

I have O365 E3 environment which is configured to use DLP sensitivity and retention labels.

I am then assigning sensitivity labels on word documents ( using office app on windows) and then save the document in SharePoint online.

 

Client requirement is to enforce that documents marked with certain sensitive labels can be stored only in a specific location(libraries) in SharePoint and not anywhere. How can i enforce this?

 

Thanks in advance

 

1 Reply
You could use Cloud App Security. Using a File Policy you can check if a file has a certain sensitive label. If it doesn't, delete that file