DLP supports adaptive scopes for scoping SharePoint policies

March 2026

Data Governance

• General availability (GA): Authoring custom data quality rules using SQL expression language is now generally available. Users can create custom rules using both Azure Data Factory expression and SQL expression languages.

Data Loss Prevention

• Preview: DLP supports adaptive scopes for scoping SharePoint policies. SharePoint location scoping

Data Security Investigations

• New: Categorization now includes a Standard and Advanced option. Standard categorization can significantly reduce the time it takes to complete processing and the amount of Data Security Investigation Compute Units (compute unit) needed for categorization.

Data Security Posture Management (preview)

• New: You can now use federated credentials as a more secure method of authentication to run Fabric data risk assessments. This change is also available for data risk assessments in Data Security Posture Management for AI (classic). For more information, see Prerequisites for Fabric data risk assessments.

Insider Risk Management

• In preview: Disable content download to create cases without content to reduce triage time. To get started, see Enable or disable content download.
• General availability (GA): Microsoft Fabric indicators now include Lakehouse indicators.
• General availability (GA): A new quick policy template for detecting data theft from non-Microsoft 365 apps by users leaving your organization is now available.
• General availability (GA): Pay-as-you-go usage reports provide transparency and enable more accurate budget planning and policy tuning.

Sensitivity labels

• General availability (GA): Manual labeling for OneNote, supported at the section level. Because retention labels also support labeling at the section level, you might find it helpful to review the architecture diagram for retention policies and retention labels. To enable the support for sensitivity labels, SharePoint and OneDrive must already be enabled for sensitivity labels, and then run the following PowerShell command: Set-SPOTenant -EnableSensitivityLabelforOneNote $true
• In preview: Auto-labeling policies introduce a new flow where you must decide whether to automatically apply a sensitivity label, or remove a label when the configured conditions apply for files in SharePoint and OneDrive. When you chose to automatically apply a sensitivity label, you can now optionally choose to always overriding an existing label that has a lower priority label, even if it was manually applied. This option was previously available for emails only and now extends to files in SharePoint and OneDrive.