Microsoft Purview | Detect AIP labelled files (pfile) using the DLP condition “content contains sensitivity label”
Currently Microsoft Purview Data Loss Prevention policies support detecting email attachments with sensitivity label using the condition called “content contains sensitivity label” (https://learn.microsoft.com/microsoft-365/compliance/dlp-sensitivity-label-as-condition?view=o365-worldwide). Currently, this condition supports detecting labels in Microsoft Office and PDF file types. However, Microsoft Purview Information Protection sensitivity label can be applied to other file types as well using AIP client or other clients using Information Protection SDK like Secude which uses this SDK to convert the labelled file to .pfile (https://learn.microsoft.com/azure/information-protection/how-does-it-work#variations).
We are now extending the support of the DLP condition “content contains sensitivity label” to pfile as well ensuring all possible labelled files will be detected and protected by DLP policies.


HANDS ON tek
M365 Admin





