Microsoft Purview | Data Security Investigations – Introducing new personal data examination

[Introduction]

Microsoft Purview Data Security Investigations (DSI) is introducing a new AI-powered examination capability that helps organizations identify and understand the presence of personal data within investigation datasets. This enhancement expands DSI’s existing AI examination features by adding personal data analysis alongside credential, risk, and mitigation analysis. The goal is to help investigators more quickly assess potential privacy exposure and respond appropriately during security investigations.

This message is associated with Microsoft 365 Roadmap ID 559388.

[When this will happen:]

General Availability (Worldwide): We will begin rolling out in late April 2026 and expect to complete by early May 2026.

[How this affects your organization:]

Who is affected:

• Admins and investigators who use Microsoft Purview Data Security Investigations

What will happen:

• A new AI-powered examination type will be available to analyze investigation content for personal data.
• The analysis can identify and extract common types of personally identifiable information, such as names, addresses, and bank account numbers.
• This capability is additive and complements existing AI examination types for credentials, risk, and mitigation.
• The feature is available by default and respects existing Purview permissions and investigation workflows.

Learn more: Use AI analysis in Data Security Investigations | Microsoft Learn

[What you can do to prepare:]

• No admin action is required before the rollout.
• Consider notifying investigators and security teams about the new personal data examination capability.
• Update internal documentation or investigation playbooks if you reference DSI examination types.
• Review AI analysis guidance for Data Security Investigations to understand how results should be interpreted.

Learn more: Learn about Data Security Investigations | Microsoft Learn

[Compliance considerations:]

Area	Explanation
AI/ML processing of customer data	This change introduces a new AI-powered analysis that processes existing investigation content to identify and extract personal data.
Processing of existing customer data	Content already included in a Data Security Investigation may be analyzed to surface personally identifiable information.
Admin monitoring and compliance activities	The new examination results provide additional insights that can support compliance reviews and investigation outcomes.