Protecting HR Data in Microsoft 365

In this video, I walk through how to protect HR data in Microsoft 365 by moving beyond “secure SharePoint sites” and actually controlling where sensitive HR information can go. I show you exactly how to use Microsoft Purview Sensitive Information Types and Data Loss Prevention (DLP) policies to detect HR data (like employee IDs) wherever it lives—SharePoint, OneDrive, Teams, or Exchange and stop it from leaving the organization using simulation, policy tips, and enforcement. You will learn how to: ✅ Map out where HR data actually lives across SharePoint and OneDrive ✅ Build a custom Sensitive Information Type for internal HR identifiers ✅ Test your classifier against real HR files to reduce false positives ✅ Create a DLP policy that blocks HR data from being sent outside the org ✅ Use simulation mode to safely discover non-compliant locations ✅ Surface alerts and incidents when users try to email or share HR data This is not a theoretical overview. It is a practical, step-by-step guide for IT teams and MSPs who want to protect HR data in transit, no matter where it ends up in Microsoft 365. Automate Microsoft 365 security assessments with CloudCapsule: Blog + deeper technical breakdown: https://tminus365.com/protecting-hr-d... Table of Contents: 00:00- intro 01:11 - Understanding Classifiers in Microsoft Purview 04:43 - Sensitive Information Types 09:08 - Licensing Considerations 09:42 - Creating a Custom Sensitive Info Type 15:19 - Creating a DLP Policy 20:30 - Simulation Mode 22:28 - End-User Experience 25:40 - Outro #MicrosoftPurview #DataLossPrevention #HRDataProtection #M365Security #Compliance #Microsoft365 #MSP