DLP (Data Loss Prevention)

DLP (Data Loss Prevention) combines policy, classification and controls to detect or limit unauthorised use of information. It may observe email, web, endpoints, cloud applications or removable devices, but coverage depends on the channels and data actually integrated. A rule does not understand business context by itself and may block legitimate work or miss poorly classified information. Deployment should define owners, categories, exceptions, response and handling of personal data. Observation mode and false-positive review help teams introduce blocking gradually. Encryption, access control and training perform complementary roles. Zero alerts can mean no leakage, an inadequate policy or a sensor that stopped reporting. Effectiveness therefore requires source-health monitoring, sampled validation and a process for reviewing exceptions rather than simply enabling a product.