Information Protection
Microsoft Purview Information Protection helps you discover, classify, and protect sensitive information wherever it lives or travels. At its core are Sensitivity Labels—persistent tags that travel with your content and enforce protection policies automatically.
What is Information Protection?
Information Protection provides a unified labeling experience across Microsoft 365:
| Capability | What It Does |
|---|---|
| Sensitivity Labels | Classify content as Public, Internal, Confidential, or Restricted |
| Visual Markings | Add headers, footers, and watermarks to documents |
| Encryption | Protect files so only authorized users can open them |
| Access Control | Restrict actions like printing, copying, or forwarding |
| Auto-Labeling | Automatically classify content based on sensitive data detection |
Why It Matters for Copilot
Sensitivity Labels are the #1 control for Copilot readiness. When a document is labeled "Restricted," Copilot respects those restrictions. Without labels, Copilot treats all content equally—potentially surfacing sensitive data to users who shouldn't see it.
Labels create a trust boundary that Copilot understands:
- ️ Labeled content → Copilot respects access controls
- Unlabeled content → Copilot may surface to anyone with file access
Label Taxonomy for Higher Ed
| Label | Use Case | Protection |
|---|---|---|
| Public | Press releases, public websites | None |
| Internal | General university business | External sharing blocked |
| Confidential | HR documents, budget drafts | Encryption available |
| Confidential - FERPA | Student records, grades | Encryption + access control |
| Confidential - HIPAA | Health records | Encryption + audit logging |
| Restricted | Export-controlled research, PII | Full encryption + no external access |
Key Capabilities
️ Manual Labeling
Users apply labels in Office apps, Outlook, and SharePoint. Labels persist when files are copied or shared.
Auto-Labeling
Automatically apply labels when content contains:
- Social Security Numbers
- Credit card numbers
- Student IDs (custom SIT)
- FERPA-protected information
Encryption & Rights Management
Protect sensitive files with Azure Rights Management:
- Only authorized users can open
- Prevent copy/paste, printing, forwarding
- Revoke access after sharing
Container Labels
Apply labels to Teams, SharePoint sites, and Microsoft 365 Groups to control:
- External sharing settings
- Guest access permissions
- Privacy (public vs. private)
Quick Links
| Resource | Description |
|---|---|
| Purview Information Protection | Label management portal |
| Sensitivity Labels Overview | Microsoft documentation |
| Implementation Guide | Enterprise deployment guide |
Related Solutions
- Data Loss Prevention — Use labels as DLP conditions
- DSPM — Discover unlabeled sensitive content
- Data Lifecycle Management — Combine labels with retention