← Back
Outlook on the web: New setting to use data classification services for DLP evaluation
MC1315220 · build prod-20251231-200323
Category
planForChange
Severity
normal
Major change
True
Last modified
2026-05-18 21:46:01
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
Services
Exchange Online
Tags
Feature update, Admin impact
Master tags
Admin, Security
Roadmap IDs

One-line summary

Admins can migrate OWA DLP policy evaluation from Exchange-based to DCS-based, enabling enhanced DLP features and new admin controls; review and test before enabling, rollout starts mid-May 2026.

Similar updates

More like this
MC1202974 Microsoft Outlook: Customizable oversharing dialog for DLP in New Outlook
Microsoft Outlook: Customizable oversharing dialog for DLP in New Outlook New Outlook for Windows adds customizable oversharing dialogs for DLP, letting admins tailor ... [Introduction] New Outlook for Windows will now support the ability to show a customizable oversharing dialog for Data Loss Prevention (DLP). Learn more:  Data loss prevention.
MC1182689 (Updated) Microsoft Purview | New Copilot Security Controls in Microsoft Admin Center
(Updated) Microsoft Purview | New Copilot Security Controls in Microsoft Admin Center Microsoft Purview adds new DLP and security features in Admin Center to help admins monitor and control Copilot data sharing, with public preview starting mid-November 2025. Updated November 12, 2025: We have updated the content. [Introduction] To help.
MC1198702 Microsoft Outlook: Wait on Send for Data loss Prevention
Microsoft Outlook: Wait on Send for Data loss Prevention New Outlook for Windows adds Wait on Send for DLP, letting admins block email sending until policy evaluation completes; feature is off by default and configurable via Exchange mailbox settings. [Introduction] New Outlook for Windows will support Wait on Send for Oversharing , allowing.
MC1182008 Microsoft Purview: Inline protection for sensitive data shared over the network with non-Microsoft SASE integrations
Microsoft Purview: Inline protection for sensitive data shared over the network with non-Microsoft SASE integrations Purview DLP integrates with iboss and Netskope SASE platforms to inspect and protect inline web traffic, extending DLP to unmanaged cloud apps and generative AI, starting mid-November 2025. Microsoft Purview Data Loss Prevention.
MC1191257 (Updated) New Microsoft Purview data security posture management experience
Thank you for your patience. [Introduction] Microsoft is introducing a major evolution of Purview Data Security Posture Management (DSPM) to help organizations strengthen data security and confidently embrace AI. The new DSPM experience unifies visibility and control across traditional data and AI-driven environments, delivering outcome-based.
MC1115304 (Updated) Introduction of secure workflow to bypass retention/legal holds on OneDrive and SharePoint
What and Why: We're introducing a new capability in Microsoft Purview Data Lifecycle Management that allows admins to bypass existing retention policies and delete content from OneDrive and SharePoint Online before the retention or hold duration expires. This message is associated with Microsoft 365 Roadmap ID 496151 Rollout Schedule: Public.

Details

Summary
Outlook on the web will gain a new organization-level setting to switch DLP evaluation from Exchange-based to Data Classification Services (DCS)-based, enabling enhanced features like improved policy tips and “Wait to send.” Rollout starts mid-May 2026, with admins controlling the change via PowerShell.

Body (from Message Center)

Introduction

We are introducing a new organization-level setting that allows admins to migrate Outlook on the web (OWA) from Exchange-based Data Loss Prevention (DLP) policy evaluation to Data Classification Services (DCS)-based DLP policy evaluation. This change brings OWA in line with the new Outlook experience, enabling enhanced capabilities such as the new oversharing policy tips experience and “Wait to send.” This update helps provide a more consistent, modern, and scalable DLP experience across Outlook clients.

When this will happen:

  • General Availability (Worldwide): Rollout will begin mid-May 2026 and complete by late May 2026.
  • General Availability (GCC): Rollout will begin mid-May 2026 and complete by mid-June 2026.

How this affects your organization:

Who is affected:

  • Admins managing Exchange Online and Microsoft Purview DLP policies
  • Organizations using DLP policies in Outlook on the web

What will happen:

  • A new organization-level setting (DlpViaDcsEnabled) will be available to control DLP evaluation mode in OWA.
  • By default, the setting is False, meaning Exchange-based DLP remains in use.
  • Admins can manually enable DCS-based DLP evaluation for OWA using PowerShell.
  • Once enabled, OWA will use DCS-based DLP policy evaluation instead of Exchange-based evaluation.
  • Users may experience enhanced DLP features, including:
    • Improved oversharing policy tips
    • “Wait to send” functionality
    • Alignment with new Outlook DLP behavior
  • Some legacy Exchange-based DLP predicates will no longer be supported after migration. Refer to Data loss prevention policy tip reference for Outlook for Microsoft 365 | Microsoft Learn for details about supported features.

What you can do to prepare:

  • If you plan to continue using Exchange-based DLP evaluation, no action is required.
  • If you plan to migrate to DCS-based DLP evaluation by enabling the DlpViaDcsEnabled setting:
    • Important: Review existing DLP policies before enabling this setting. Some Exchange-based predicates are not supported with DCS-based DLP and policies using them may no longer work as expected after migration.
    • Test DCS-based DLP evaluation in a controlled environment
    • Enable the setting using Exchange Online PowerShell:
    Get-OrganizationConfig | Select DlpViaDcsEnabled
    Set-OrganizationConfig -DlpViaDcsEnabled $true
    
    • Communicate changes to compliance teams.
    • Update internal documentation.

Learn more: Set-OrganizationConfig (ExchangePowerShell) | Microsoft Learn

Compliance considerations:

Compliance areaExplanation
Alters how existing customer data is processedDLP evaluation shifts from Exchange-based processing to DCS-based processing, which may change how email content is analyzed and classified. This is existing analyzation classification flows for New Outlook and Classic Outlook.
Modifies Purview Data Loss Prevention (DLP) policies or enforcementSome Exchange-based predicates are no longer supported, and enforcement behavior may differ under DCS-based evaluation.
Includes an admin control

Admins can enable or disable the feature using the DlpViaDcsEnabled organization setting.

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Review existing DLP policies for unsupported predicates",
      "Test DCS-based DLP in a controlled environment",
      "Enable DlpViaDcsEnabled via PowerShell if migrating",
      "Communicate changes to compliance teams",
      "Update internal documentation"
    ],
    "ai_master_tags": [
      "Admin",
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Admins can migrate OWA DLP policy evaluation from Exchange-based to DCS-based, enabling enhanced DLP features and new admin controls; review and test before enabling, rollout starts mid-May 2026.",
    "ai_topics": [
      "Exchange",
      "Outlook",
      "Purview"
    ],
    "category": "planForChange",
    "details_map": {
      "Summary": "Outlook on the web will gain a new organization-level setting to switch DLP evaluation from Exchange-based to Data Classification Services (DCS)-based, enabling enhanced features like improved policy tips and \u201cWait to send.\u201d Rollout starts mid-May 2026, with admins controlling the change via PowerShell."
    },
    "id": "MC1315220",
    "importance": 4,
    "is_major_change": true,
    "last_modified": "2026-05-18T21:46:01Z",
    "ms_products": [
      "Exchange"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Exchange Online"
    ],
    "severity": "normal",
    "tags": [
      "Feature update",
      "Admin impact"
    ],
    "title": "Outlook on the web: New setting to use data classification services for DLP evaluation"
  }
}