DLP incident report trigger

Senior Member

Hi team,


Does anyone know if making changes to a DLP rule will trigger already received incident report notifications to admins?


We are making changes on a DLP rule but we notice we are getting already received incident reports emails.

1 Reply
Depends. It will likely trigger it for any files stored in SPO/ODFB that violate the policy, because of the way DLP works there. For items in Exchange, it will not.