Microsoft Purview Auto-Labeling Policies Reach Full GA: What Compliance Admins Need to Know

User-applied sensitivity labels fail at scale. Employees skip them, choose the wrong tier, or ignore prompts entirely, and classification accuracy degrades quietly while your data exposure grows. Step in, auto-labeling policies. Microsoft Purview applies labels server-side, cutting the human variable out of the classification loop entirely. In April 2026, Microsoft closed the last major capability gap: the override setting that had worked for email only now works for files in SharePoint and OneDrive. If you haven't deployed auto-labeling policies yet, the timing is right.

What Reached GA in April 2026

Auto-labeling policies themselves aren't new. What changed in April 2026 is one specific setting in the policy wizard: the option to override a manually applied label when the policy detects sensitive content.

Previously, that override only worked for Exchange (email in transit). SharePoint and OneDrive files followed default behavior: if a user had manually applied any label, the auto-labeling policy would skip those files, even if the label's priority was lower than what the policy would apply.

That changed in April 2026. You can now configure auto-labeling policies to always override a manually applied lower-priority label on SharePoint and OneDrive files, the same option email policies have had for some time. Pair that with the December 2025 addition of nested AND/OR/NOT rule logic, which brought auto-labeling policy conditions to full parity with DLP configuration, and the feature set is now complete.

One thing to be clear about: auto-labeling policies never strip a label and leave content unlabeled. They relabel or skip. The "automatically remove label" option in the same policy wizard is a separate flow with its own configuration.

Four Things to Know Before You Deploy

Workload coverage

Auto-labeling policies cover Exchange Online, SharePoint Online, and OneDrive for Business. Teams isn't a direct policy target. Teams channel files are stored in SharePoint, chat files are stored in OneDrive, and messages in transit flow through Exchange. All three paths are covered. Teams voicemail requires separate configuration.

File types

SharePoint and OneDrive auto-labeling supports Word, Excel, PowerPoint, and PDF files. PDF support requires opt-in: run Set-SPOTenant -EnableSensitivityLabelforPDF $true or toggle it in the Purview portal. The policy will skip zero-byte files, checked-out files, and files protected with Double Key Encryption.

Simulation is mandatory

Policies can't apply labels until at least one simulation completes. Expect approximately 12 hours. There's a 4,000,000 matched-file cap on simulation. If a scoped policy exceeds that cap, it can't be enabled until you reduce the scope.

Licensing

Auto-labeling policies require Microsoft 365 E5, Office 365 E5, or the Information Protection and Governance add-on. E3 licenses cover client-side automatic labeling inside Office apps only. That's a different feature, with different behavior, and it isn't a workaround.

For detailed checklists and an information protection onboarding guide, see our Purview Starter.

What to Do in the Next 30 Days

1. Make sure sensitivity labels are enabled for SharePoint and OneDrive files. Run Set-SPOTenant -EnableAIPIntegration $true or confirm it in the Purview portal. Nothing works without this.
2. Scope a pilot policy to one SharePoint site or one OneDrive user group. Run the simulation. Review results before you enable anything.
3. When you build the policy, note the auto-enable option: if the policy hasn't been edited within seven days of simulation completing, it turns on automatically. Decide whether you want that behavior before you close the wizard.
4. If you're on E3, use this as a trigger to look at the Information Protection and Governance add-on. The licensing gap here isn't bridgeable by configuration.

Sources

• Automatically apply a sensitivity label to Microsoft 365 data
• What's new in Microsoft Purview
• Enable sensitivity labels for files in SharePoint and OneDrive
• Microsoft Purview service description

Purview StarterA foundation sensitivity label taxonomy with recommended label structure and publishing guidance, baseline DLP policy configurations covering critical data types, and an information protection onboarding checklist.Tirion

Revision History

2026-04-17 — published

Initial Publish