Microsoft Purview: Data Loss Prevention-Alert Classification Property for DLP Alerts on Purview Portal Beta
Data as of 2 hours ago (26 October 2026)
Description
This feature introduces the ability to classify DLP alerts directly in the Purview portal. In addition to assigning a status, customers can now categorize alerts as True Positive, False Positive, or Benign Positive. This capability helps security teams better organize, track, and manage alerts, enabling more accurate reporting and efficient incident handling.
Change history
Added to the roadmap 18 December 2025. Tracked here since 1 September 2026. Earliest target we recorded: February 2026 (since tracked — Microsoft may have moved it before we started watching).
Nothing has changed on this item since tracking began on 1 September 2026. Changes appear here as Microsoft updates the feed.