The Week at a Glance

  • 🟡 New Purview data retention billing model is live - how your organization retains AI-generated content now directly drives monthly costs, and unreviewed retention policies could create both overcharges and compliance gaps.
  • 🟡 SharePoint labeling gaps for existing files will be closable soon - a preview feature arriving in September will auto-label data at rest, helping organizations meet data classification requirements ahead of audits.
  • 🟢 Microsoft and AXA XL deepen cyber insurance incident response integration - organizations with cyber insurance policies should confirm whether their insurer participates, as coordinated response can materially reduce breach costs.
  • 🟢 Cloud PC and virtual desktop connectivity improvements now generally available - remote workers on unstable networks will experience fewer session drops with no action required from IT.

Sources: Microsoft 365 Roadmap · Microsoft Security Blog

Why This Week Matters

The headline this week is financial and compliance accountability around AI content. Microsoft has moved data retention billing for non-Microsoft 365 AI tools to a consumption-based model, meaning organizations that have deployed Purview policies broadly may see cost increases they have not budgeted for. At the same time, a forthcoming feature that automatically applies sensitivity labels to existing SharePoint files closes a long-standing data governance gap that regulators and cyber insurers increasingly expect organizations to have addressed. Leadership should treat both items as near-term planning priorities, not routine IT updates.

Sources: Microsoft 365 Roadmap - DLM Meter Change · Microsoft 365 Roadmap - SharePoint Default Labels

Risk & Compliance

  • 🟡 Purview Data Lifecycle Management billing change: The billing model for retaining non-Microsoft 365 AI prompts and responses has shifted to volume-based pricing at $0.25 per GB per month, meaning organizations with broad retention policies covering AI tools could face unbudgeted cost increases; review your DLM policy scope and projected data volumes now, and confirm alignment with your data minimization obligations under GDPR, HIPAA, or SOC 2.

  • 🟡 SharePoint auto-labeling for data at rest: A preview arriving in September 2026 will automatically apply sensitivity labels to existing unlabeled SharePoint files, closing a classification gap that auditors frequently flag; plan now for the policy review and user communication this will require before general availability in October 2026.

  • 🟢 People Skills data deletion admin control: Administrators can now permanently delete all employee skills data from the Microsoft 365 tenant, giving organizations a clean offboarding path from People Skills that supports data subject deletion requests under GDPR and similar privacy regulations.

  • 🟢 Microsoft and AXA XL incident response integration: Microsoft Incident Response services are now accessible directly through AXA XL cyber insurance policies, streamlining the technical and insurance coordination that typically slows breach response; organizations with cyber insurance should verify their policy terms and establish contact protocols before an incident occurs.

Sources: Microsoft Security Blog - AXA XL Partnership · Microsoft 365 Roadmap - DLM Meter Change · Microsoft 365 Roadmap - SharePoint Default Labels

What Your Employees Will Notice

  • Skills data may disappear from profiles: If your IT or compliance team exercises the new People Skills deletion control, employees will no longer see inferred or confirmed skills on their profile cards or in Copilot-driven experiences. Proactive communication ahead of any deletion will prevent confusion.
  • Fewer Cloud PC session drops: Employees using Windows 365 or Azure Virtual Desktop on unstable or VPN-constrained connections should experience more reliable sessions automatically, with no action required on their part.
  • No visible changes to SharePoint yet: The auto-labeling feature for existing SharePoint files is not yet active. When it rolls out in preview (September) and generally (October), some files may receive sensitivity labels for the first time, which could affect sharing permissions depending on your label policies.

Sources: Microsoft 365 Roadmap - People Skills Deletion · Microsoft 365 Roadmap - SharePoint Default Labels · Windows 365 Blog - RDP Multipath

What Your Help Desk Should Expect

  • SharePoint access questions in Q4: When auto-labeling goes live in October, employees may find that previously shareable files are now restricted by sensitivity labels. Help desk teams should be briefed in advance on how label-driven access restrictions work and how to escalate label policy disputes.
  • People Skills deletion inquiries: If your organization initiates a skills data deletion, expect employee questions about missing profile information. Prepare a short FAQ that explains the change and who to contact.
  • Cloud PC reliability questions should decrease: If your help desk has been logging tickets related to Windows 365 or Azure Virtual Desktop session disconnects, volume should decline now that RDP Multipath with redundant TCP is generally available.

Sources: Microsoft 365 Roadmap - SharePoint Default Labels · Windows 365 Blog - RDP Multipath

Cost & Licensing

  • Purview DLM volume-based billing is now active: Retaining non-Microsoft 365 AI prompts and responses now costs $0.25 per GB per month. Organizations that applied broad Purview retention policies to third-party AI tools - or that have high volumes of Copilot interaction data governed by DLM policies - should request a cost projection from their IT or licensing team. Retention policies that were set without volume in mind may now produce material monthly charges. This is also an opportunity to right-size retention periods to what compliance actually requires, rather than retaining everything by default.

Sources: Microsoft 365 Roadmap - DLM Meter Change

Planning Horizon

  • Within 30 days - Purview DLM billing review: Commission a review of all active Data Lifecycle Management policies covering AI-generated content and obtain a projected monthly cost under the new volume-based model before the next budget cycle.

  • Within 60 days - SharePoint auto-labeling preview readiness: Confirm that your default SharePoint library sensitivity labels are correctly configured before the September preview activates, to avoid unintended access restrictions on existing files at general availability in October.

  • Within 60 days - AXA XL cyber insurance policy review: If your organization holds a cyber insurance policy through AXA XL or is renewing coverage, confirm whether Microsoft Incident Response services are included and document the activation process for your incident response plan.

  • Within 90 days - People Skills data governance decision: Determine whether your organization intends to continue using People Skills or offboard from the feature, and document that decision to support data privacy compliance posture under GDPR or applicable state privacy laws.

Sources: Microsoft 365 Roadmap - DLM Meter Change · Microsoft 365 Roadmap - SharePoint Default Labels · Microsoft Security Blog - AXA XL Partnership

If You Take No Action

  • Purview DLM billing: If your IT team does not review and scope your Data Lifecycle Management policies before end of August, you risk carrying retention costs that exceed your compliance requirement and were not included in budget forecasts. This is a direct and recurring monthly financial exposure.
  • SharePoint auto-labeling: If your default SharePoint sensitivity labels are not validated before October, auto-labeling will apply whatever defaults are currently configured to all existing files. If those labels carry access restrictions, employees may lose access to files they use daily, generating a concentrated burst of help desk tickets and potential business disruption.

Sources: Microsoft 365 Roadmap - DLM Meter Change · Microsoft 365 Roadmap - SharePoint Default Labels