Data Loss Prevention (DLP)
Technologies and policies that detect and block the unauthorised movement of sensitive personal data out of controlled environments.
Full Definition
Data Loss Prevention (DLP) tools inspect data at rest, in use and in motion for sensitive content — PII, PHI, financial information, intellectual property, source code — and apply policy when a monitored action would move the content outside its permitted scope. The three main deployment surfaces are endpoint DLP (controlling USB, print, copy-paste on managed devices), network DLP (inspecting email, web and cloud-API traffic for sensitive content) and cloud DLP (inspecting SaaS and object-store content).
In a privacy programme, DLP is the control layer that gives teeth to classification: an asset labelled 'customer PII' can be configured to block external email forwarding, to require encryption on download, and to log every access. DLP is cited in GDPR Article 32 and DPDP Section 8(5) implementations as part of 'reasonable security safeguards' for sensitive personal data, and is a near-ubiquitous requirement in SOC 2, ISO 27001 and HIPAA control sets.
Related terms
Data Classification
The process of labelling each data asset with its sensitivity, regulatory category and handling requirements.
Data Exfiltration
The unauthorised movement of personal or sensitive data out of a controlled environment to an attacker-controlled destination.
Cloud Access Security Broker (CASB)
A security control that sits between enterprise users and cloud services to apply visibility, access, data-security and threat-protection policies.
Relevant regulations
Automate your privacy program
TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.
Free 14-day trial · No credit card required · Setup in minutes