Understand data protection and governance tasks for Microsoft 365 and Copilot

Official references for this objective

• Microsoft — Microsoft Purview DSPM Sensitive Information Policy Deployment Guide for Education - M365 Education | Microsoft Learn

  Don't combine Sensitive information types and Sensitivity labels in the same rule.

• Microsoft — Configure data policies for agents - Microsoft Copilot Studio | Microsoft Learn

  To prevent agent makers from publishing agents that don't require authentication, configure a data policy that blocks the connector Chat without Microsoft Entra ID authentication

• Microsoft — Data, Privacy, and Security and Microsoft 365 Copilot Extensibility | Microsoft Learn

  If a user does not have access to a SharePoint site, Teams channel, or Outlook mailbox, the agent cannot retrieve or display content from those

• Microsoft — Enterprise data protection in Microsoft 365 Copilot and Microsoft 365 Copilot Chat | Microsoft Learn

  the prompts, responses, and data accessed through Microsoft Graph aren't used to train foundation models

• Microsoft — Copilot Control System Security and Governance | Microsoft Learn

  To prevent Copilot and agents from processing certain sensitive files and from using them in responses, use Microsoft Purview Data Loss Prevention for Microsoft 365

• Microsoft — Purview management for SharePoint Embedded containers | Microsoft Learn

  audit events for Copilot Pages and Copilot Notebooks also appear under the Loop application IDs — there's no separate Copilot Pages or Copilot Notebooks identity

• Microsoft — Microsoft 365 Copilot data and compliance readiness | Microsoft Learn

  Documents using legacy Information Rights Management (IRM) are not used in Copilot grounding.

• Microsoft — Microsoft 365 Copilot data protection architecture | Microsoft Learn

  Items encrypted by Azure Rights Management without a sensitivity label still require EXTRACT or VIEW usage rights for the user

• Microsoft — Microsoft Purview - FastTrack – Microsoft 365 | Microsoft Learn

  Data classification. Sensitive information types. Creating sensitivity labels. Applying sensitivity labels.

• Microsoft — Perform data subject requests (DSRs) for Workflows agents | Microsoft Learn

  Workflows Agent Data Subject Rights Administrator 363ee124-fdb2-406f-9272-ebf239730ed2 Grants full access to perform read and delete operations for Data Subject Rights requests on Workflows Agent Flows

• Microsoft — Secure Microsoft 365 Copilot for small businesses - Microsoft 365 admin | Microsoft Learn

  In Business Premium , use eDiscovery (Standard) to search for Copilot interactions by content, keyword search, create cases, assign managers, apply legal hold, and export

• Microsoft — Step 6 - Data loss prevention in Microsoft 365 A5 license for education - M365 Education | Microsoft Learn

  Copying data to USB drives Printing sensitive documents Uploading files to unauthorized cloud services Copying content to clipboard or third-party apps