Phase 2 of always-on diagnostics for Endpoint Data Loss Prevention enables admins to collect diagnostic traces from Windows endpoints via the Purview portal without user involvement, improving troubleshooting. Rolling out worldwide from March 2026, it requires admin enablement and does not affect existing DLP policies.
Applies to: Microsoft Purview
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).