Microsoft Purview Data Loss Prevention and Information Protection auto-labeling are expanding beyond Microsoft services to cover non-Microsoft connected apps including Google Workspace, Box, Dropbox, Salesforce, ServiceNow, Amazon Web Services, and Cisco Webex. Organizations can now apply the same classifiers, sensitive information types, and sensitivity labels used across Microsoft 365 to detect and protect sensitive data shared through these platforms — without managing separate DLP tooling for each service. For compliance teams managing data across a mixed cloud environment, this update brings a meaningful portion of the shadow IT and cross-platform data exposure risk under centralized Purview governance. The feature is currently in development and expected to begin rolling out in September 2026.

Microsoft Purview Data Loss Prevention is expanding to calendar events in Outlook for Mac and mobile, enabling organizations to detect and prevent sensitive information from being shared through meeting subjects, descriptions, and invite content. When a policy is triggered, users receive policy tips, remediation guidance, or enforcement actions — the same protection experience already available for email, now applied to a surface that has historically operated outside DLP coverage. For organizations managing compliance across all communication channels, this update closes a meaningful gap where sensitive data could leave through calendar invites without any policy enforcement in place. The feature is currently in development and expected to begin rolling out in September 2026.

Microsoft Teams is introducing app-centric management in the Teams Admin Center for GCC High, giving admins granular control over which users, groups, or the entire tenant can install individual Teams apps. Admins can set a default behavior for newly published apps and override availability per app — choosing between all users, specific users and groups, or no one — replacing the broader app permission policy model with per-app precision. Existing app permission policies are migrated automatically to preserve current availability. The feature is currently in development and expected to begin rolling out in September 2026.

Microsoft OneDrive is adding the ability for users to exclude specific folders from syncing on Windows and Mac, keeping local-only content such as PowerShell modules, Visual Studio configuration, and node modules off OneDrive entirely. Administrators can define folder exclusion rules at the organizational level, giving IT teams consistent control over what does and doesn’t sync across managed devices. For organizations managing developer workstations or devices with large local tooling directories, this update reduces unnecessary storage consumption and keeps cloud sync focused on content that belongs there. The feature is currently rolling out.

Microsoft Teams now allows administrators to enable automatic recording and transcription for Teams call queues, ensuring calls answered by representatives are captured without requiring manual action from agents. Admins can configure the feature per queue through the Teams admin center or PowerShell, with granular controls over recording, transcription, and agent access to recordings. Recordings are stored in SharePoint and accessible through the Queues app call history, giving organizations a consistent, auditable record of customer interactions. The feature is currently rolling out for Commercial and GCC environments and requires a Teams Premium license for the Queues app.

Microsoft Purview sensitivity labels now apply directly to Microsoft Entra cloud security groups, closing a governance gap that left security groups outside the classification model you already use everywhere else. The same labels you publish in the Purview portal and configure for Microsoft 365 groups and sites now carry over automatically, with no separate label setup required. That means the access controls and classification tied to sensitive data extend to the security groups actually gating that access, not just the collaboration groups around it. It’s a small config change with an outsized governance payoff for any org running a mature labeling strategy. The feature is currently in development and expected to begin rolling out in August 2026.

Microsoft Purview DLP can now quarantine a sensitive file the instant a policy is triggered, moving it to a restricted, admin-controlled location and cutting off access for every user in real time. The file isn’t deleted — it’s preserved for review and investigation while the exposure is contained immediately, not after someone gets around to responding. This closes the gap between detection and enforcement that let sensitive data sit exposed while admins scrambled to react. For SharePoint and OneDrive, that means a leaked contract, credential list, or PII file gets locked down automatically instead of continuing to spread. The feature is currently rolling out for Microsoft Purview DLP customers.

Microsoft Purview Data Loss Prevention is adding the ability to block specific external domains or individual users from accessing sensitive files in SharePoint and OneDrive, giving admins precise control over who can reach protected content. When a DLP policy detects a file access attempt by a blocked external domain or user, access is denied before exposure occurs, moving enforcement from detection after the fact to prevention at the point of contact. For organizations managing sensitive content shared across organizational boundaries, this update closes a meaningful gap between labeling files as sensitive and actually controlling who can open them. The feature is currently rolling out.

Microsoft Purview is expanding Data Loss Prevention (DLP) to Intune Mobile Application Management-protected apps, evaluating clipboard actions against DLP policies before sharing is allowed on managed mobile devices. When a user attempts to copy sensitive content from a managed app, Purview DLP assesses the action in real time, blocking or restricting sharing based on configured policies before the data can move. For organizations where mobile workflows are an active part of daily operations, this update closes a meaningful gap where sensitive data could leave managed apps through simple copy-and-paste actions without any policy enforcement in place. The feature is currently in development and expected to begin rolling out in November 2026.

Microsoft Teams Rooms on Windows is adding support for human interpreter listening mode, allowing room participants to select their preferred language and hear live interpreter audio directly through the room system. When meeting organizers enable language interpretation in Meeting options, in-room attendees can access the same interpretation experience previously available only to remote participants, bringing parity to multilingual meetings in physical spaces. The feature is currently rolling out for Commercial, GCC, GCC High, and DoD environments.