Overview
The UofI has implemented a number of automated controls to help with Data Loss Prevention (DLP). This includes policies in email to find and identify sensitive private information like U.S. Financial Data. If an email message contains sensitive information, and an external recipient is included, the message will be blocked.
Blocked Message - Outlook on the Web
When using Outlook on the Web, the email message will be checked when clicking on the "Send" button and it will be immediately blocked if a policy restriction is found.
Example "Send blocked" message:
Blocked Message - Outlook Desktop
When using Outlook desktop, the email message will appear to be sent but a Non-Delivery Report (Bounce) message will be returned.
Example blocked message:
Example blocked message content:
Subject: Message Blocked: <Original Message Subject>
Your email message conflicts with a policy in your organization. The message wasn't delivered to all recipients. Issues:
- Message is sent to people outside your organization.
- Message contains the following sensitive information: Credit Card Number
- Following Senders violate organizational policy: 'sender@uidaho.edu'.
Blocked Message Details
Created Date: 1/17/2025 7:26:44 PM
Sender Address: sender@uidaho.edu
Blocked Recipient Address: recipient@example.com
Subject: DLP - U.S. Financial Data
Message is attached.
Policy Scope - Affected Senders
This affects employees with access to Banner and other administrative systems. This policy does not affect student accounts.
Sample Data
Sample data for testing the DLP functionality is available at https://dlptest.com/sample-data/(opens in a new tab).