Data Loss Prevention Explainer
Data loss prevention, often shortened to DLP, is a set of tools and rules that help an organization keep sensitive information from being shared, copied, or stored in unsafe ways. It can cover email, cloud applications, web uploads, files, and removable devices.
DLP systems look for information that needs protection. They may use labels applied by people, patterns such as account numbers, or rules that recognize certain document types. The system then compares a planned action with the organization’s policy.
Depending on that policy, DLP can warn a person, block a transfer, require an extra approval, encrypt a file, or simply record the event for review. A useful policy balances protection with everyday work so people can still complete legitimate tasks.
DLP works best when data is classified clearly and policies are tested and adjusted over time. It is not meant to replace good judgment, but it can make risky sharing more visible and easier to control.
Data loss prevention uses policies and security controls to reduce risky sharing of sensitive data. It can identify protected information and respond when someone tries to move it.
DLP can be applied to email, web uploads, cloud storage, files, endpoint devices, and removable media. The coverage depends on the organization’s tools and policies.
DLP reviews data against configured rules, labels, or patterns. Organizations should explain how these controls work and tune them to protect data without unnecessarily disrupting work.
Explore more "Explainers"
Discover additional explainers across politics, science, business, technology, and other fields. Each explainer breaks down a complex idea into clear, everyday language—helping you better understand how major concepts, systems, and debates shape the world around us.