Chapter 16: Personal Data Protection in Microsoft 365
One of the challenges faced by Microsoft 365 compliance administrators is to be aware of their responsibilities concerning any personal data that resides within their environment. The General Data Protection Regulations (GDPR) describes personal data as any information that relates to an identified or identifiable natural person.
In this chapter, we will demonstrate how you can identify and protect personal data within your Microsoft 365 environment by using content searches to find personal data, and then we will look at how to protect that data using retention or sensitivity labels. We will also explain how Data Loss Prevention (DLP) reports, audit logs, alert policies, and Cloud App Security can be used to monitor leaks of personal data.
We will cover these topics in the following order:
- Conducting searches for personal data
- Using retention labels to protect personal data
- Accessing logs and reports to search...