Microsoft has unveiled a major set of enhancements to Data Loss Prevention (DLP) policies in Power Automate and Copilot Studio. These updates mark a significant leap forward in governance, scalability, and control for organizations automating processes across cloud and desktop environments.

Here’s a quick breakdown of what’s new:

What is DLP?
Data Loss Prevention lets admins govern data access across Power Automate flows (cloud & desktop) and Copilot Studio agent flows.
Flow-Level Enforcement
DLP policies—managed in the Power Platform Admin Center—now automatically evaluate flows during editing and saving. If policies change, non-compliant flows can be suspended, and blocked connectors disabled.
Trigger Blocking
Admins can now block specific triggers, just like actions, offering more granular control over automation behavior.
Endpoint Filtering (Public Preview)
A powerful new preview feature lets you restrict browser automation in desktop flows to approved websites only—ideal for securing high-risk scenarios.
Environment Variables for Endpoints
Now you can define endpoints dynamically using environment variables in your policies:
@environmentVariable("variableName") — simplifying solution migration.