(Updated) Microsoft Outlook Mobile adds support for DLP policy tips and enforcement

Updated April 6, 2026: We have updated the timeline. Thank you for your patience.

Introduction

The Outlook Mobile team is updating the release for Data Loss Prevention (DLP) Policy Tips & Override for Outlook Mobile. A number of improvements have been made to the initial scope of this rollout, along with some unforeseen challenges that will be listed in detail.

This message is associated with Microsoft 365 Roadmap ID 496146.

When this will happen

Production Build App Store Release for Android and iOS: We are targeting May 4th to submit to the app store, and on average it can take up to a week for Apple and Google to then distribute that build via the App Stores.

How this affects your organization

The following updates have been made to this DLP rollout for Outlook Mobile:

1. [added] Custom oversharing dialog support
2. [added] Custom policy information
3. [added] Policy tip evaluation performance improvements
4. [added] Attachment scanning
5. [added] Intune control for Android and iOS to turn Data Leak Prevention on or off (default is set to OFF)
6. [temporarily removed] External recipient rule validation

Due to unique challenges with external recipient rule validation we are removing External Recipient rule validation from this release pending changes to the implementation.

After feedback we have added an Intune control that is defaulted to OFF to give your organization the opportunity for validation and user training prior to enabling DLP on Android and iOS. Documentation links for "DLP on Android and iOS" and "Intune controls for DLP in Mobile" will be provided in an update soon.

What you can do to prepare

Please prepare to validate your organization's rules in a test environment prior to enabling Data Leak Prevention on Mobile, and where possible provide training for users which can greatly improve their success and overall experience with policy tips and rules.

Updated March 9, 2026: We have updated the content. Thank you for your patience.

Introduction

The Outlook Mobile team is updating the release for Data Loss Prevention (DLP) Policy Tips & Override for Outlook Mobile. A number of improvements have been made to the initial scope of this rollout, along with some unforeseen challenges that will be listed in detail.

This message is associated with Microsoft 365 Roadmap ID 496146.

When this will happen

Production Build App Store Release for Android and iOS: We are targeting April 6th to submit to the app store, and on average it can take up to a week for Apple and Google to then distribute that build via the App Stores.

How this affects your organization

The following updates have been made to this DLP rollout for Outlook Mobile:

1. [added] Custom oversharing dialog support
2. [added] Custom policy information
3. [added] Policy tip evaluation performance improvements
4. [added] Attachment scanning
5. [added] Intune control for Android and iOS to turn Data Leak Prevention on or off (default is set to OFF)
6. [temporarily removed] External recipient rule validation

Due to unique challenges with external recipient rule validation we are removing External Recipient rule validation from this release pending changes to the implementation.

After feedback we have added an Intune control that is defaulted to OFF to give your organization the opportunity for validation and user training prior to enabling DLP on Android and iOS. Documentation links for "DLP on Android and iOS" and "Intune controls for DLP in Mobile" will be provided in an update soon.

What you can do to prepare

Please prepare to validate your organization's rules in a test environment prior to enabling Data Leak Prevention on Mobile, and where possible provide training for users which can greatly improve their success and overall experience with policy tips and rules.

Updated March 2, 2026: We have updated the timeline. Thank you for your patience.

Introduction

Outlook Mobile for iOS and Android will soon support Data Loss Prevention (DLP) policy tips and enforcement. This update helps users avoid accidental data leaks by providing inline alerts or pop-ups when sensitive content is detected—based on admin-configured DLP rules. This enhancement brings DLP behavior in Outlook Mobile in line with Outlook for desktop and web, ensuring consistent compliance enforcement across platforms.

This message is associated with Microsoft 365 Roadmap ID 496146.

When this will happen

General Availability: We will start rolling out April 6, 2026.

How this affects your organization

With this update, organizations using Microsoft Purview DLP policies will see those policies enforced in Outlook Mobile. When users attempt to send messages containing sensitive information—such as credit card numbers or national IDs—they will receive policy tips or blocking dialogs, depending on how the policy is configured.

This change enhances your organization’s data protection posture and supports regulatory compliance. If DLP policies are already in place for Outlook desktop or web, no additional configuration is required. The feature is on by default and requires no admin action to enable.

What you can do to prepare

What you can do to prepare

• Review existing DLP policies in Microsoft Purview to ensure they are scoped to include mobile clients.
• No new policies are required if DLP is already in use for Outlook desktop or web.
• No additional licensing is needed beyond what is already in place for Microsoft Purview DLP.

Find more on this topic: Learn about data loss prevention.

Compliance considerations

Updated September 29, 2025: After further review, we need to roll this back. We apologize for any inconvenience.

Introduction

Outlook Mobile for iOS and Android will soon support Data Loss Prevention (DLP) policy tips and enforcement. This update helps users avoid accidental data leaks by providing inline alerts or pop-ups when sensitive content is detected—based on admin-configured DLP rules. This enhancement brings DLP behavior in Outlook Mobile in line with Outlook for desktop and web, ensuring consistent compliance enforcement across platforms.

This message is associated with Microsoft 365 Roadmap ID 496146.

When this will happen

We will communicate via Message center when we are ready to proceed.

How this affects your organization

With this update, organizations using Microsoft Purview DLP policies will see those policies enforced in Outlook Mobile. When users attempt to send messages containing sensitive information—such as credit card numbers or national IDs—they will receive policy tips or blocking dialogs, depending on how the policy is configured.

This change enhances your organization’s data protection posture and supports regulatory compliance. If DLP policies are already in place for Outlook desktop or web, no additional configuration is required. The feature is on by default and requires no admin action to enable.

What you can do to prepare

What you can do to prepare

• Review existing DLP policies in Microsoft Purview to ensure they are scoped to include mobile clients.
• No new policies are required if DLP is already in use for Outlook desktop or web.
• No additional licensing is needed beyond what is already in place for Microsoft Purview DLP.

Find more on this topic: Learn about data loss prevention.

Compliance considerations

Updated August 7, 2025: We have updated the timeline. Thank you for your patience.

Introduction

Outlook Mobile for iOS and Android will soon support Data Loss Prevention (DLP) policy tips and enforcement. This update helps users avoid accidental data leaks by providing inline alerts or pop-ups when sensitive content is detected—based on admin-configured DLP rules. This enhancement brings DLP behavior in Outlook Mobile in line with Outlook for desktop and web, ensuring consistent compliance enforcement across platforms.

This message is associated with Microsoft 365 Roadmap ID 496146.

When this will happen

General Availability rollout will begin in early August 2025 (previously mid-August) and is expected to complete by early September 2025.

How this affects your organization

With this update, organizations using Microsoft Purview DLP policies will see those policies enforced in Outlook Mobile. When users attempt to send messages containing sensitive information—such as credit card numbers or national IDs—they will receive policy tips or blocking dialogs, depending on how the policy is configured.

This change enhances your organization’s data protection posture and supports regulatory compliance. If DLP policies are already in place for Outlook desktop or web, no additional configuration is required. The feature is on by default and requires no admin action to enable.

What you can do to prepare

What you can do to prepare

• Review existing DLP policies in Microsoft Purview to ensure they are scoped to include mobile clients.
• No new policies are required if DLP is already in use for Outlook desktop or web.
• No additional licensing is needed beyond what is already in place for Microsoft Purview DLP.

Find more on this topic: Learn about data loss prevention.

Compliance considerations