December 2025
Focus
Focus
Enterprise DLP

December 2025

Table of Contents

December 2025

Review the new features introduced to Enterprise Data Loss Prevention (E-DLP) in December 2025.

Strengthening MPIP Labeling Security

December 9, 2025
Microsoft periodically makes changes to Purview (formerly AIP) labels that can cause your existing Enterprise Data Loss Prevention (E-DLP) file property data patterns to fail to detect sensitive documents. When these detection mechanisms fail, sensitive data labeled with Microsoft Purview labels might bypass Enterprise DLP inspection, which can lead to compliance risks and unintended data exposure.
Strengthening MPIP Labeling Security significantly improves the resiliency and reliability of Enterprise DLP patterns that inspect for Purview labels. Enterprise DLP now has a more robust detection mechanism for file property data patterns that detect for Purview labels. This shields your policy rules against labeling changes initiated by Microsoft updates, ensuring your detection patterns remain effective without requiring frequent, reactive updates from your data security administrators. This strengthened consistency and stability saves your team significant time and resources by eliminating the need for constant monitoring and updating, ensuring consistent data security enforcement despite changes from Microsoft.

Enterprise DLP Integration with Prisma Browser

December 15, 2025
The Enterprise Data Loss Prevention (E-DLP) and Prisma Browser Integration solves the challenge of maintaining consistent data protection across different security products by unifying data classification, management, and visibility. Instead of duplicating effort, your data security administrators can leverage their investment in creating and tuning data profiles and classifiers across both Enterprise DLP and Prisma Browser. The integration dynamically synchronizes profiles and classifiers, ensuring updates made in Enterprise DLP automatically reflect in Prisma Browser rules.
For Prisma Browser, your data security administrators can configure a Enterprise DLP data profile for Local Detection or for Cloud-Assisted detection. Data profiles configured for Local Detection support only regex-based detections. Prisma Browser evaluates traffic that matches against Local Detection data profiles directly on the browser and only Prisma Browser can use Local Detection data profiles. Conversely, your data security administrators can configure Enterprise DLP Cloud Assisted data profiles with all supported detection methods. Prisma Browser intelligently routes classification requests based on profile type, optimizing security, and performance.
This unified approach extends protection beyond traditional file transfers to include last-mile controls like clipboard operations, screen sharing, typing guard, and data masking. Your organization gains comprehensive data protection with reduced administrative overhead while benefiting from deployment flexibility that can reduce dependency on Explicit Proxy for SaaS apps.

New App Support

Enterprise Data Loss Prevention (E-DLP) introduced new app support for the following:
New Feature
Expanded File Size Support for Existing Apps
December 15, 2025
Enterprise DLP now supports large file inspection for the following apps:
  • Amazon S3
  • (Amazon Photos only) Amazon Cloud Drive
  • Basecamp
  • LinkedIn Web - Upload
  • Mendeley
File Inspection Support for GenAI Apps
December 15, 2025
Enterprise DLP now supports file inspection for the following GenAI apps:
  • Claude AI