Data Loss Prevention technology (DLP)


Just a quick note from the ITS folks:

Dear Campus Community:

Last week, users received an announcement from the UM System IT Security team regarding the new Data Loss Prevention technology (DLP) that will be activated on the University email system at the end of September. DLP functionality looks for any information in emails sent outbound or any files in OneDrive, Teams and SharePoint Online that contain sensitive information. Then, DLP encrypts those emails or prevents anonymous sharing of those files. The main purpose of DLP is to catch sensitive data that is shared inadvertently or unencrypted.

The implementation of DLP does not mean that email is the appropriate method for transmitting or sharing sensitive data like the following.

  • Social Security Numbers
  • Protected Health Information (ePHI)
  • Credit Card data
  • Banking Information
  • Other personal or protected data

This type of information should not be sent via email unless absolutely necessary. Current processes, procedures and solutions should continue to be used for sharing sensitive data.

If you would like to discuss changing your current methods of sharing or storing sensitive information, please reach out to the Information Security Office at security@umsl.edu. We are happy to work with you and your team to see what options we have available to you.

If you are in need of purposely encrypting email or want more information on how DLP works, please look through the FAQ page.

We are working hard to keep your information safe, but we need your help by following University information security policies.

As always, please be cognizant of the information you share through email or other tools, and do not share sensitive information unless it’s intentional, authorized and encrypted.

For questions regarding DLP or sharing sensitive information, please email security@umsl.edu or visit the DLP FAQ Page.