Microsoft Purview compliance portal: Insider Risk Management – Personal email triggers
In this update, we are adding the recently added email indicators in Insider Risk Management as triggers. 1. Sending email with attachments to free public domains – Users will be brought into scope of a policy when business-sensitive data is potentially leaked from a work email account to a free public domain email, potentially leading to a data security incident. 2. Sending email with attachments to self – Users will be brought into scope of a policy when business-sensitive data is potentially leaked from a work email account to user’s personal email account or emailing self, potentially leading to a data security incident.
Admins with appropriate permissions can enable these indicators from the settings page and use these triggers in the data leaks or data leaks by priority users template.

| Product | |
|---|---|
| Release phase | Preview |
| Release date | September CY2025 Preview date: July CY2025 |
| Platform | Web |
| Cloud Instance | Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD |
| Created | 2025-08-08 |
| Roadmap ID | 496149 |
| Roadmap Link | https://www.microsoft.com/microsoft-365/roadmap?id=496149 |

HANDS ON tek
M365 Admin


