Blocking File Uploads to Generative AI Websites Using Microsoft Purview DLP

Question

How can file uploads to generative AI websites, such as ChatGPT, Perplexity, and Deepseek, be blocked regardless of file type or size?

Currently, file uploads to certain websites like Gmail and iCloud are managed using Microsoft Purview DLP, but blocking uploads to generative AI websites has not been successful.

Any guidance or steps on how to achieve this would be appreciated.

Answer 1

To block file uploads to generative AI websites using Microsoft Purview Data Loss Prevention (DLP), you can configure DLP policies to restrict access to specific service domains. Here are the steps you can follow:

1. Create a DLP Policy: In the Microsoft Purview admin center, navigate to Data loss prevention and select Policies to create a new policy.
2. Specify Locations: Ensure that the policy is applied to the appropriate locations, such as SharePoint sites and OneDrive accounts.
3. Define Policy Settings: Under the policy settings, you can specify the conditions for the DLP rules, including the types of sensitive items you want to restrict.
4. Service Domains: In the DLP policy settings, navigate to the Browser and domain restrictions to sensitive data section. Here, you can add the domains of the generative AI websites you want to block (e.g., chatgpt.com, perplexity.ai, deepseek.com) to the Service domains list.
5. Set Actions: Choose the action to block uploads to these domains. You can set the action to Block or Block with override to prevent users from uploading files to these specified domains.
6. Test and Monitor: After implementing the policy, monitor its effectiveness and make adjustments as necessary to ensure it is working as intended.

By following these steps, you should be able to block file uploads to generative AI websites effectively.

---

References:

• Best practices for sharing files and folders with unauthenticated users
• Configure endpoint data loss prevention settings