Key takeaway:
Admins must configure Microsoft Purview sensitivity label policies to enable auto-labeling from attachments in Outlook across mobile and desktop platforms.
In This Article
Microsoft recently announced automatic sensitivity label application in Outlook for iOS, Android, and Mac clients, leveraging Microsoft Purview. This feature extends auto-labeling capabilities previously available in desktop Outlook to mobile platforms, enhancing data protection across all endpoints. The September 2026 rollout aligns with Microsoft's focus on cross-platform compliance automation.
Introduction
The new functionality allows Outlook clients to automatically apply sensitivity labels to emails based on attached files' metadata. For example, if a user attaches a document labeled 'Confidential,' the email itself will inherit that label. This reduces manual intervention while maintaining consistent classification across Microsoft 365.
Microsoft Purview Configuration Requirements
To enable this feature, administrators must configure the following in Microsoft Purview:
- Sensitivity Label Policies: Create or modify existing policies to include auto-labeling rules for attachments. This requires defining conditions based on file type, content, or metadata.
- Attachment-Based Labeling: Enable the 'Auto-apply labels from attachments' option in the sensitivity label settings. This is found under
Compliance Center > Sensitivity Labels > Policy Settings. - Client-Side Enforcement: Ensure the 'Apply labels to emails' toggle is enabled for Outlook clients. This setting is located in
Compliance Center > Exchange > Sensitivity Labels > Client Settings.
Platform-Specific Implementation Details
The feature is available across all major Outlook clients as of September 2026:
| Platform | Auto-Labeling Support | Configuration Requirements |
|---|---|---|
| Outlook for Mac | ✅ Full support | Requires Exchange Online PowerShell module v3.2+ |
| Outlook for iOS | ✅ Full support | Requires iOS 17.2+ and Outlook app v2.26+ |
| Outlook for Android | ✅ Full support | Requires Android 13+ and Outlook app v2.26+ |
Key Implementation Considerations
Administrators should prioritize the following during deployment:
- Label Inheritance Rules: Define clear rules for how attachment labels propagate to emails. For example, a 'High' label on an attachment should trigger a 'High' label on the email.
- User Education: Train users to understand how auto-labeling works, especially when overriding system recommendations.
- Testing: Use the
Test-LabelPolicycmdlet in Exchange Online PowerShell to validate label inheritance before full deployment.
Failure to configure Apply labels to emails in client settings will prevent auto-labeling from functioning in Outlook clients, even if policies are correctly defined in Purview.
Conclusion
The September 2026 rollout of attachment-based auto-labeling in Outlook clients represents a significant step forward in automated compliance. By configuring Microsoft Purview policies with attention to client-side enforcement and label inheritance rules, administrators can ensure consistent data protection across all endpoints. This capability complements Microsoft's broader security initiatives, including the recent Defender XDR updates that prioritize DLP alert behaviors.