Using DLP to automatically report HIPAA incidents

In the previous recipe, we created a DLP policy that detected HIPAA-protected content and sent an incident report as part of its handling. In this recipe, we'll edit an existing DLP policy and add an incident report as part of its response.

Getting ready

You should be a global or compliance administrator to complete this recipe.

How to do it…

1. Go to your DLP policies directly at https://compliance.microsoft.com/datalossprevention. You could also go to the Microsoft 365 compliance center and select Show all > Data loss prevention from the left navigation menu.
2. Select the policy for which you're configuring an incident report, then click Edit policy:

   Figure 12.11 – The Edit policy button available for a selected DLP policy

3. Select Policy settings > expand the content specifications > Edit rule:
   

   Figure 12.12 – Edit rule button available for a specific rule in the selected policy...