DLP incident report trigger

[JZapata_SwO]

Hi team,

Does anyone know if making changes to a DLP rule will trigger already received incident report notifications to admins?

We are making changes on a DLP rule but we notice we are getting already received incident reports emails.

[#2]

Depends. It will likely trigger it for any files stored in SPO/ODFB that violate the policy, because of the way DLP works there. For items in Exchange, it will not.