Cybersecurity

What is Data Loss Prevention?

Quick answer

Tools and policies, known as DLP, that detect and stop sensitive data from being shared, leaked, or moved outside approved channels.

Data Loss Prevention, explained

Data loss prevention systems identify sensitive information, such as card numbers, health records, ID numbers, or confidential documents, using patterns, labels, and content analysis. They then apply rules: blocking an email that contains unencrypted customer data, warning a user before uploading a file to a personal cloud account, or logging unusual downloads.

For example, a DLP rule might stop an employee from pasting a spreadsheet of customer passport numbers into a public AI chatbot or sending it to a personal email address. DLP features are built into many email, cloud storage, and endpoint security products. Poorly tuned rules can block legitimate work and frustrate staff, so organizations usually start by monitoring, refine the rules, and focus on their most sensitive data first.

Related terms

Guides that mention Data Loss Prevention