Overview
The UofI has implemented a number of automated controls to help with Data Loss Prevention (DLP). This includes policies in email to find and identity sensitive private information like U.S. Financial Data. If an email message contains sensitive information, and an external recipient is included, the message will be blocked.
When using Outlook on the Web, the email message will be checked when clicking on the "Send" button and it will be immediately blocked if a policy restriction is found.
Example "Send blocked" message:
When using Outlook desktop, the email message will appear to be sent but a Non-Delivery Report (Bounce) message will be returned.
Example blocked message:
Example blocked message content:
Subject: Message Blocked: <Original Message Subject>
Your email message conflicts with a policy in your organization. The message wasn't delivered to all recipients. Issues:
- Message is sent to people outside your organization.
- Message contains the following sensitive information: Credit Card Number
- Following Senders violate organizational policy: 'sender@uidaho.edu'.
Blocked Message Details
Created Date: 1/17/2025 7:26:44 PM
Sender Address: sender@uidaho.edu
Blocked Recipient Address: recipient@example.com
Subject: DLP - U.S. Financial Data
Message is attached.
This affects employees with access to Banner and other administrative systems. This policy does not affect student accounts.
Sample data for testing the DLP functionality is available here: https://dlptest.com/sample-data/