Encrypt uploads to non-trusted domains using MDCA or Purview DLP

Question

I have a number of corporate domains I trust and therefore want to allow uploads of documents to these sites, without doing anything to the file.
If a file is uploaded to a domain that is "non-trusted", I would like to encrypt the document.
Is this possible? If yes, what are the exact steps required to do so?

Answer 1

Hi @Aadil Karolia

Greetings & Welcome to Microsoft Q&A forum! Thanks for posting your query!

Yes, it is possible to encrypt documents when uploaded to non-trusted domains using Microsoft Purview Data Loss Prevention (DLP) and Microsoft Purview Information Protection (MDCA – Microsoft Data Compliance Authority).

To encrypt uploads to non-trusted domains using Microsoft Purview Data Loss Prevention (DLP), you can set up a DLP policy that restricts access or encrypts content based on the domain. Kindly refer to the Prevent unauthenticated sharing of sensitive content document for detailed steps on creating such a policy:

For additional information, please refer the below Microsoft documentations:

Commonly used Microsoft Defender for Cloud Apps information protection policies

Configure Sensitive service domains

I hope this information helps. Please do let us know if you have any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.