Use sensitivity labels in Microsoft 365 apps when connected experiences are disabled

Organizations can disable Microsoft 365 connected experiences for privacy without affecting sensitivity labels. Microsoft Purview services are now separate from privacy control policies and will follow Purview's security admin controls. This update, associated with Roadmap ID 400716, will be rolled out from June to August 2024.

Your organization can now disable connected experiences for privacy concerns without impacting data security policies, such as sensitivity labels.

Services associated with Microsoft Purview (sensitivity labels, rights management, and so on) are no longer controlled by policy settings to manage privacy controls for Microsoft 365 apps. Instead, these services will rely on their existing security admin controls in Purview portals.

This message is associated with Microsoft 365 Roadmap ID 400716.

[When this will happen:]

Public Preview: We will begin rolling out late June 2024 and expect to complete by early August 2024.

General Availability: We will begin rolling out early August 2024 and expect to complete by mid-August 2024.

[How this will affect your organization:]

This only impacts organizations that disable connected experiences that analyze content or other connected experiences related to Purview.

When these connected experience settings are disabled for users with Purview or Defender policies, connections will always be allowed for the backend services needed to fulfill these policies.

Connected experiences that analyze your content:

• Automatically apply or recommend sensitivity labels
• Microsoft Purview Data Loss Prevention policy tips

Other connected experiences:

• Information Rights Management
• Sensitivity labels

 [What you need to do to prepare:]

This change rolls out automatically when you deploy Version 2407 of Microsoft 365 apps.

For organizations that want to also disable services used by Purview in addition to connected experiences, they must disable the associated policy in the appropriate admin portal. Additionally, admins can disable sensitivity labels in Microsoft 365 apps while continuing to use Purview policies in other workloads, such as Microsoft Teams and Microsoft SharePoint.