dlp alert aggregation

The dlp alert aggregation tag covers Microsoft Purview Data Loss Prevention changes focused on grouping related alerts by user. The featured update was added to the Microsoft 365 Roadmap for GCC, GCC High, and DoD tenants, with general availability targeted for September 2026. It is designed to help security and compliance teams investigate DLP activity when multiple rules generate related events around the same user. Rather than treating every alert as an isolated record, the approach aims to reduce console noise and make high-volume DLP workflows easier to triage. This archive is relevant to government cloud administrators and teams managing operational DLP investigations.