DLP with Except if message type is Encrypted is not skipping the encrypted email

[Robin_Poulose]

DLP policy created with the exception to exclude the encrypted email however it dont work , still email is received for approval  

[#2]

Hello, try setting it up the other way around. Meaning, when it contains GDPR + is being shared outside the org. = restrict access or encrypt the content in M365 locations (either block or encrypt using built-in protection or sensitivity labels).

[#3]

Thanks! But I found another work around , I used message type is PermissionControlled instead of Encrypted.
https://community.spiceworks.com/topic/2306136-transport-rule-not-working
Encrypted: Encrypted messages.
PermissionControlled: Messages that have specific permissions configured.
PermissionControlled :It is usually the emails that have been controlled by information security management services, such as the previous Active Directory Rights Management Service (RMS) and Azure Information Protection (AIP) service.

[#4]

Hello again, out of curiosity, which encryption type are you using here?

[#5]

New OME encryption. On outlook Web app we get encrypt button.

[#6]

@Robin_Poulose 

The key to this is to create a custom DLP policy that looks for the key word(s) used in the Exchange Mail Flow Rule in the Subject (in the case below "Secure:").  This policy needs to be in priority 0 and once matched, stops processing additional DLP policies.  See below: