Microsoft Compliance Solution Capabilities
The Purview family
Microsoft Purview covers data governance and compliance. Core areas: data classification (sensitive information types, trainable classifiers), Data Loss Prevention (DLP) to block sensitive data leaving, retention and deletion policies and labels, records management, Insider Risk Management, eDiscovery, Audit, Communication Compliance, and Compliance Manager for control assessment.
Key mechanics
Sensitivity labels classify and protect content (encryption, watermarks) and can travel with the file. Retention labels/policies keep or delete content for a period. DLP policies use conditions (sensitive info type, location) and actions (block, warn, encrypt). Compliance Manager scores your posture against assessments and provides improvement actions. eDiscovery supports legal holds and investigations. Audit retains activity logs for investigation.
Traps to watch
- Sensitivity labels protect content; retention labels govern lifecycle. Do not swap them.
- DLP enforces data movement rules; it is not the same as retention.
- Compliance Manager measures controls against standards - it does not enforce them.
- eDiscovery is investigation/legal; Insider Risk is behavioral detection.
- Trainable classifiers learn patterns; sensitive information types use predefined patterns.
Rule of thumb
Ask what the requirement is about: protecting content → sensitivity labels/DLP; keeping or deleting over time → retention; proving controls → Compliance Manager; investigating → eDiscovery/Audit.
Worked example
A policy must prevent credit card numbers from being emailed externally. Answer: a DLP policy with a sensitive information type condition for credit card numbers and a block action for external email.