DLP is a Microsoft Exchange configuration option that applies transport rules - dictionary matches, keyword matches and regular expression evaluation - to analyze email and attachments to check for compliance with your company policies and prevent employees from sending out information that is sensitive or private.

If an email has content which violates your policy, actions can automatically be performed including denying delivery of the message, copying an individual or distribution list for notification or forwarding the message to a moderator for approval.

You can define your own custom policies or use ready-made regulatory and compliance settings for the following:

  • Gramm-Leach-Billey Act (GLBA)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • PCI Data Security Standard (PCI DSS)
  • Federal Trade Commission (FTC) Consumer Rules
  • Personally Identifiable Information (PII)