October 11, 2022
Data loss prevention for Google Chat now generally available
This announcement was made at Google Cloud Next ‘22. Check out Next OnAir to tune into the livestream or watch session recordings following the event. Visit the Cloud Blog to learn more about the latest Google Workspace innovations for the ever-changing world of work.
What’s changing
In July 2022, we announced data loss prevention (DLP) rules for Google Chat as an open beta. Over the next several weeks, this feature will become generally available for select Google Workspace editions.
Data protection rules for Chat help admins and security experts build a stronger framework around sensitive data to prevent personal or proprietary information from ending up in the wrong hands. These leaks, whether accidental or malicious, are a top concern for our customers.
Admins can selectively apply data protection rules to:
- Messages in group conversations, spaces, and/or direct messages
- Messages between internal and/or external participants
- Message text and/or attachments
Once DLP rules are applied, messages and files in relevant conversations will automatically be scanned for sensitive information. Admins can configure the action to be taken in response to sensitive data being detected, such as: block from sending, warn before sending, and log for audit.
In the Security Investigation Tool, we’ve added additional tabs which contain more information on incidents, such as Incident Details, containing information about the message, sender and a triggered rule, and Chat Transcript, showing preceding and following messages to the triggering one, providing a detailed context for investigation.
Additional information regarding Chat events
Getting started
- Admins:
- This feature will be OFF by default and can be enabled at the domain, OU, or group level. You can create DLP rules in the Admin console under Security > Data Protection.
- Note: You can modify existing DLP rules for Drive and Chrome to also apply to Chat.
- Visit the Help Center to learn more about turning data loss prevention in Chat on for your organization.
- If admins opt to log these events, they can be accessed in the Security Investigation Tool.
- End users: There is no action required.
Rollout pace
- Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on October 11, 2022
Availability
- Available to Google Workspace Enterprise Standard, Enterprise Plus, Education Standard, Education Plus.
- DLP for Chat is also available to Cloud Identity Premium users who are also licensed for Workspace editions that include Google Chat and Audit and investigation. Visit the Help Center for more information.
- Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers