Creating a DLP policy for content with custom keywords in the name or subject

Earlier in this chapter in the Using DLP to automatically report HIPAA Incident Reports recipe, you created a DLP policy based on pre-defined criteria (HIPAA-protected data types). In this recipe, we'll create another DLP policy, but this one will look for content that includes custom keywords we specify. Specifically, we'll be looking for content that contains any reference to our top-secret, fictional Project Wildebeest.

Getting ready

You should be a global or compliance administrator to complete this recipe.

How to do it…

1. Go to the Microsoft 365 compliance center at https://compliance.microsoft.com.
2. Choose Data classification from the left-hand navigation menu.
3. Choose Sensitive info types:

   Figure 12.15 – The Sensitive info types button on the top navigation menu of the Data classification page

4. Click Create info type.
5. Name and describe the sensitive...