Data protection on the endpoint used to be relatively straightforward: prevent sensitive files from being copied to USB drives, printed or moved to unauthorized locations.

Today, users work across many more channels. Data moves through the clipboard, network shares, browsers, cloud applications and a growing number of web-based services.

In this session, we follow one sensitive document across these different paths and examine how Microsoft Purview Endpoint DLP can detect and control its movement. We start with traditional scenarios such as USB, print and clipboard, then continue through network shares, browser uploads and cloud applications.

Along the way, we look at how policies behave in practice, which controls are available for each destination and where seemingly similar user actions require very different technical approaches.

Finally, we briefly look at what changes when the destination is an AI service and why this is simply another evolution of a much older data protection challenge.