Set up compliance features
Your Microsoft 365 Business comes with features to protect your data and devices, and help you keep yours and your customers' sensitive information secure.
Set up DLP features
See Create a DLP policy from a template for an example on how to set up a policy to protect against personally identifiable information (PII).
DLP comes with many ready-to-use policy templates for many different locales. For example, Australia Financial Data, Canada Personal Information Act, U.S. Financial Data, and so on. See What the DLP policy templates include for a full list. All of these templates can be enabled similar to the PII template example.
Set up email retention with Exchange Online Archiving
Exchange Online Archiving license features help maintain compliance and regulatory standards by preserving email content for eDiscovery. It also helps reduce your risk if there is a lawsuit, and provides a way to recover data after a security breach or when you need to recover deleted items. You can use litigation hold to preserve all of a user's content, or use retention policies to customize what you want to preserve.
Litigation hold: You can preserve all mailbox content including deleted items by putting a user's entire mailbox on litigation hold.
To place a mailbox on litigation hold, in the Admin center:
In the left nav, go to Users > Active users.
Select a user whose mailbox you want to place on litigation hold. In the user pane, expand Mail settings, and next to More settings, choose Edit Exchange properties.
On the mailbox page for the user, choose ** mailbox features ** on the left nav, and then choose the Enable link under Litigation hold.
In the litigation hold dialog box, you can specify the litigation hold duration in the Litigation hold duration field. Leave the field empty if you want to place an infinite hold. You can also add notes and direct the mailbox owner to a website you might have to explain more about the litigation hold. > Save.
Retention: You can enable customized retention policies, for example, to preserve for a specific amount of time or delete content permanently at the end of the retention period. To learn more, see Overview of retention policies.
Set up Sensitivity labels
Sensitivity labels come with Azure Information Protection (AIP) Plan 1, and help you classify, and optionally protect your documents and emails, by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or by using a combination where users are given recommendations.
To set up Sensitivity labels, view create and manage sensitivity labels video.
Install the Azure Information Protection client manually
To manually install the AIP client:
Download AzinfoProtection_UL.exe from Microsoft download center.
You can verify that the installation worked by viewing a Word document and making sure that the Sensitivity option is available on the Home tab.
For more information, see Install the client.