Question

Your organization has deployed Microsoft 365 Copilot. The compliance team is concerned that Copilot may surface highly sensitive documents in its responses to users who should not access them. Documents already carry the 'Highly Confidential' sensitivity label. You must configure Purview DLP so that content labeled 'Highly Confidential' is excluded from being processed and summarized by Microsoft 365 Copilot, while still allowing normal file access. What should you do?

Accepted Answer

Create a DLP policy that includes the Microsoft 365 Copilot location and add a rule condition matching the 'Highly Confidential' sensitivity label with an action to restrict processing by Copilot.

Answer

Create a retention policy scoped to SharePoint and OneDrive that deletes 'Highly Confidential' content after it is accessed by Copilot.

Answer

Modify the sensitivity label policy to disable co-authoring for 'Highly Confidential' documents.

Answer

Create an Endpoint DLP policy that blocks copying 'Highly Confidential' content to the clipboard on managed devices.