Apply AIP labels to existing data at scale?

[romatlo32]

Hi folks,

Does MS365 have the capability to apply a label to existing data in SPO and OD based on a Sensitive data scan?

For example

Sensitive Data:     Label:

SSN                      Confidential

PCI                       Confidential

Patents                 Top Secret

Thanks,

romatlo

[#2]

Hi @romatlo32,

You do have the ability to create an auto-labeling policy and target locations such as SPO and OD but right now it is limited in terms of scale as you can only add 10 sites to each auto-labeling policy and you are allowed to create no more than 10 of these policies per tenant. I hear that the limit will be increased in the future, but this is currently what it is.

For each auto-labeling policy you can choose a label (ex: Confidential) to auto apply based on rules (conditions) that are met. So in your case you can create a rule with a condition equal to 'Content that contains any of these sensitive info types"

 SSN

 PCI (You may have to individually select the sensitive information types that are predefined (over 200 to choose from) or create your own if necessary)

Select SPO and OD locations

You'd then have to create another auto-labeling policy --> Choose a label(ex: Top Secret) to auto apply --> create a rule with a condition equal to 'Content that contains any of these sensitive info type(s)':

Patent

Select SPO and OD locations

This will apply to content that is already saved (and future content) in SPO and OD if it matches the conditions of the rules you define.

I've included a link below to Microsoft documentation that discusses this in greater detail. Hope this Helps!

- Julian

https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view...

[#3]

@Julian_Nwosu 

Thank you!  Sounds like you are confirming for auto labeling for new documents, correct?

I am also referring to existing data (before a labeling policy) that has no label at all.  Could we also label that existing data?

[#4 · Accepted solution]

@romatlo32 Correct. You can also label existing data at rest in SharePoint and OneDrive

Specific to auto-labeling for SharePoint and OneDrive:

• Office files for Word, PowerPoint, and Excel are supported. Open XML format is supported (such as .docx and .xlsx) but not Microsoft Office 97-2003 format (such as .doc and .xls).
  • These files can be auto-labeled at rest before or after the auto-labeling policies are created. Note that files cannot be auto-labeled if they are part of an open session (the file is open).

https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view...

- Julian