Three Microsoft Purview updates worth paying attention to

Microsoft continues to invest heavily in Microsoft Purview, and the latest announcements include updates across information protection, data lifecycle management, and security operations. While the features target different areas of the platform, they all address a challenge many organizations are facing: managing growing amounts of information while maintaining control, governance, and security.

Here are three updates keeping an eye on.

Purview auto-labeling gets a significant boost for SharePoint and OneDrive

Most organizations have seen their SharePoint and OneDrive content grow rapidly over the past few years, and with Microsoft 365 Copilot helping users create even more content, that trend is unlikely to slow down. Keeping data properly classified and protected at scale is becoming increasingly important.

Microsoft has announced an increase in the maximum auto-labeling capacity for Microsoft Purview Information Protection in SharePoint Online and OneDrive for Business. The daily processing limit will increase from 100,000 files to 500,000 files per tenant, allowing significantly more existing content to be evaluated and labeled each day. Existing auto-labeling policies will automatically benefit from the increased capacity, with no changes required to policy configuration or user experience.

Rollout is expected to begin in early September 2026 for Public Preview and complete by late September 2026. General Availability worldwide is expected to begin in early October 2026 and complete by late October 2026. As always, Microsoft timelines may change. Microsoft 365 Roadmap ID: 567890.

More information:

Purview introduces priority cleanup for OneDrive and SharePoint content

Microsoft has announced a new priority cleanup workflow in Microsoft Purview Data Lifecycle Management that allows administrators to permanently delete specific content types in SharePoint Online and OneDrive for Business, even when retention policies or holds are in place. The feature introduces a new Delete data permanently option that enables hard deletion of targeted content.

For content under hold, deletion requires review and approval from an eDiscovery administrator before it can proceed. Once deleted through this process, the content is no longer discoverable through SharePoint search, Copilot experiences, or eDiscovery. The feature is not enabled by default and requires administrators to explicitly create and configure a priority cleanup policy.

Public Preview rollout began in mid-August 2026 and is expected to complete by mid-September 2026. General Availability worldwide is expected to begin in late September 2026 and complete by mid-November 2026. These timelines were updated by Microsoft on August 19, 2026. As always, Microsoft timelines may change. Microsoft 365 Roadmap ID: 558343.

More information:

Data Security Triage Agent summaries coming to Defender XDR DLP alerts

Microsoft has announced that AI-generated summaries and categorizations from the Microsoft Purview Data Security Triage Agent will be surfaced directly within Data Loss Prevention (DLP) alerts in the Microsoft Defender XDR portal. The update helps security analysts investigate and triage DLP alerts more efficiently by providing additional context directly where they are already working.

Organizations that have deployed the Data Security Triage Agent will see summaries and categorizations appear within DLP alerts in Defender XDR. If the agent has not yet been deployed, eligible analysts will be able to initiate deployment directly from the DLP alert experience. Ongoing management of the agent, including configuration and monitoring, will continue to take place in Microsoft Purview. Existing DLP policies and enforcement behavior are unchanged.

Public Preview began rolling out in early April 2026 and completed in mid-April 2026. General Availability worldwide is now scheduled for August 2027, a change from the previously announced August 2026 timeline. As always, Microsoft timelines may change. Microsoft 365 Roadmap ID: 558860.

More information:

  • Microsoft 365 Roadmap ID 558860 ()

These updates show Microsoft's continued focus on strengthening governance and security across Microsoft 365. From improving the ability to classify and protect data at scale, to introducing new options for permanently removing content, and bringing DLP investigation insights directly into Defender XDR, the common thread is giving administrators and security teams better control over information throughout its lifecycle.

Thank you for reading. If you'd like to stay up to date with Microsoft 365, Copilot, Teams, security, compliance, and AI-related announcements, you can follow me on LinkedIn.

Comments