Sensitive data rarely stays in one place. It moves from SharePoint and Teams into Copilot, browsers, local applications, the clipboard and external services. In this session, we follow that data across the modern workplace and show where Microsoft Purview can detect, restrict or audit its movement. We will look at sensitivity labels, DLP, Endpoint DLP, browser controls and the gaps between them. Using practical demos, we test what happens when users copy, paste, download or upload protected information. You will see which controls actually stop data, which only create visibility, and where additional configuration is required. The goal is simple: understand how to protect sensitive data when it leaves the application where it started.