Data Protection

Data loss prevention (DLP)

Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.

Addresses 192 stories in our coverage in the last 90 days 4 products that provide it

What it is

Classification of sensitive data, and policies that warn, block or log when it is sent, uploaded or copied where it should not go.

How to value it

Most data leaks are not dramatic hacks but data sent to the wrong place: a personal email, a public link, a chatbot. DLP lowers the chance of a reportable personal data breach, and gives evidence of what did and did not leave during an incident.

Questions to ask a vendor

  1. 1Can it classify data automatically, and how accurate is it on our kinds of documents?
  2. 2Does it cover email, cloud apps, endpoints and AI tools?
  3. 3How do we keep false alarms low enough that staff accept it?
  4. 4How is employee privacy handled?

For your risk register

Risk
Sensitive or personal data leaves through everyday channels.
Control
Data classification with DLP on email, cloud and endpoints.
Owner
Data protection lead.
Measure
DLP incidents per month and share of sensitive data labelled.

A starting point: set the owner and measure to fit your organisation.

Products that provide it

Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.

Microsoft

Microsoft Purview Data Loss Prevention

Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.

Recent stories it addresses

881 stories in total

How we list vendors

  • A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
  • Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
  • Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
  • Logos, product names and quoted text belong to the vendors and are shown to identify them.
  • Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.