Block downloads documents with MIP Sensitivity labels

Contributor

We have a requirement to block downloading sensitive documents on personal PCs (non-domain).

 We have M365 E5 license. What is the best procedure to block downloads any document sensitivity label applied?

 

 

3 Replies
You can use Microsoft Defender for Cloud Apps. Microsoft have a tutorial that explains more https://docs.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad
Thank You.
Created MDA Session policy using Conditional access. The sensitive data is being blocked from on-AD joined systems. The documents are blocked from viewing also, not only for downloading.

Our requirement is block from downloading, but should able to open in Read only, should not block to open.

Is this possible?