DLP Rule for all data not tagged with AIP Label

[Stuart Fletcher]

I am trying to find a way to ensure any data from on premise environment does not reach our tenant unless it has been reviewed and tagged by the user. I would like to block access to the file outright.

I have tried using the New-DlpComplianceRulev2 cmdlet using ExceptIfContentPropertyContainsWords "Data:Restricted,Data,General"  to no avail. 

"(Example - minus the Null ) New-DlpComplianceRulev2 -Name Block-All -Policy Managed_On_Prem_data -BlockAccess $true -ExceptIfContentPropertyContainsWords "Data:Restricted,Data,General" -Disabled $false -NotifyUser xxxx"

Does anyone know a way of doing this ? I cannot see a way to have a rule fire on the lack of a tag.

Thanks in advance

[#2]

Unfortunately, I don't think this is possible. Would love to see if someone has managed to achieve something similar though :)