In plain English
Sensitivity labels are like stamps on a document that follow it everywhere — even if it's emailed, downloaded, or shared externally. A "Highly Confidential" label can automatically encrypt the file, prevent forwarding, add a watermark, and block printing. Unlike manual classification, Purview can apply labels automatically using AI to detect content like tax file numbers or health identifiers.
Full definition
Sensitivity labels are defined in and published to users via label policies. A typical taxonomy has three to five labels: Public, Internal, Confidential, and Highly Confidential — each with configurable protection settings that activate when the label is applied.
Auto-labelling policies scan content across Exchange, , , and for sensitive information types (like Australian tax file numbers, Medicare numbers, or credit card details) and apply labels without user action — closing the gap left by manual classification.
Labels persist with content through its lifecycle. A file labelled "Confidential" that is attached to an email, uploaded to a file-sharing site, or opened on an unmanaged device retains its and access restrictions. This is the core control for preventing sensitive data leaving the organisation.