Tenant announcements

Microsoft Purview | DLP-Create Purview network data security policies without pay-as-you-go configuration

MC1478970

All Microsoft 365 Message Center posts · Daily summary

About this page These posts come from a tenant in West Europe and are shown as a reference. Day-by-day digest: MC Summary. Linked to the roadmap via Roadmap ID when Microsoft names one. Items are kept for 12 months. Always check Message Center in your own environment for what applies to you.
Archive This post is no longer in the Microsoft 365 Message Center (last seen on 6 okt 2026). Microsoft removes posts after a while. We keep the last version here as an archive.
MC1478970

What and why

Based on customer feedback, Microsoft Purview network data security policies can be created and managed without configuring pay-as-you-go, regardless of the integration partners. These collection and DLP policies help discover and protect sensitive data shared with unmanaged cloud apps and websites (including AI) through browsers, applications, add-ins, APIs, and other channels.

Microsoft Entra Global Secure Access Internet Access is included with the appropriate per-user, per-month licensing and works without pay-as-you-go. Integrations with non-Microsoft SASE and secure browser partners still require pay-as-you-go. Customers can create and configure policies for these non-Microsoft integrations, but the integrations will not function until pay-as-you-go is configured.

For more information, see Learn about Microsoft Purview Network Data Security

Rollout schedule

Global: We will begin rolling out on late September 2026 and expect to complete by late October 2026.

Impact on your organization

This change becomes available automatically in your tenant as it rolls out. Administrators can then create policies to protect text and files sent and received through network traffic using Entra Internet Access without requiring a pay-as-you-go subscription. Existing inline web traffic Purview policies applied to the network continue to work without interruption.

Action Required/Recommendations

Learn more about the solution, including prerequisites, using the following links:

Compliance considerations

Does the change include an admin control and, can it be controlled through Entra ID group membership?Yes. The feature includes or affects admin controls, policies, permissions, roles, authentication, or management settings as described in this message. Review the linked documentation or admin center controls for group-based configuration support.