Microsoft Purview compliance portal: Endpoint Data Loss Prevention: Advanced label-based protection for all files on devices

Turning this feature on will allow users to work on files, including files other than Office and PDF files, with sensitivity labels that apply access control settings in an unencrypted state on their devices. Endpoint DLP will continue to monitor and enforce access control and label-based protection on these files even in unencrypted state and automatically encrypt them before they’re transferred outside from a user’s device. This feature is supported only on Windows devices.