* In Documents: Sensitive projects that contain the following words: Project Tailspin, Project Contoso, and Project Falcon - One SIT
* In documents: Physical addresses in the UK - one SIT
* Credit card numbers in documents and emails - one SIT
a single sensitive information type for credit card numbers can be applied to both documents and emails, often as part of a data loss prevention (DLP) or sensitivity labeling system in Microsoft
365 and other platforms. These systems can automatically detect credit card numbers within documents and emails and then apply predefined sensitivity labels that enforce security policies, such as encryption or access restrictions, for both types of content.
* User sign-in credentials in emails - one SIT
* National health service numbers from the UK in documents and emails - one SIT A single sensitive information type classification, such as for UK National Health Service (NHS) numbers, can be applied to both documents and emails, typically by using a data loss prevention (DLP) or sensitivity labelling system within Microsoft 365 or NHSmail. This allows a uniform policy to detect and protect NHS numbers whether they appear in a Word document or an email, ensuring consistent security protocols across different data formats within the NHS environment.
Reference:
https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-learn-about

Policy tips in DLP: Policy tips are messages shown to users when their action (such as sending sensitive content via email) conflicts with a DLP policy.
For Exchange email location, policy tips are supported in the following apps:
Outlook for Microsoft 365 (desktop client) #
Outlook on the web (OWA) #
Outlook Mobile (iOS/Android) # Policy tips are not shown in mobile apps. Instead, DLP actions (block/restrict
/send incident report) still apply, but the user does not see a policy tip notification.
Therefore:
Supported: Outlook for Microsoft 365, Outlook on the web.
Not supported: Outlook Mobile apps.
Reference:
Microsoft Learn: Policy tips in DLP
Quote: "Policy tips are supported in Outlook on the web and Outlook 2013 and later. Policy tips are not supported in Outlook mobile apps."

Required for monitoring interactions with third-party generative AI sites:
[B] * Devices are onboarded to Microsoft Purview, required for:
- Gaining visibility into sensitive information that's shared with third-party generative AI sites. For example, a user pastes credit card numbers into ChatGPT.
[A]- Applying endpoint DLP policies to warn or block users from sharing sensitive information with third-party generative AI sites. For example, a user identified as elevated risk in Adaptive Protection is blocked with the option to override when they paste credit card numbers into ChatGPT.
Reference:
https://learn.microsoft.com/en-us/purview/dspm-for-ai-considerations

Explanation:
Box 1: To include the sensitive info type detected for each DLP rule match, you need to add a custom column in Activity Explorer. This ensures that the exported file contains specific details about the detected sensitive information types.
Box 2: DLP activity exports from Activity Explorer are always in CSV (Comma-Separated Values) format.
This format allows for easy data analysis and reporting in Excel or other data-processing tools.