tag:blogger.com,1999:blog-5245696872621940063.post-19820863844969659382024-11-01T09:57:00.000-07:002024-11-14T08:42:59.827-08:00<h3 style="text-align: left;">What’s changing</h3><p>In addition to Google Drive, we’re expanding data classification labels to now include Gmail. <a href="https://support.google.com/a/answer/9292382?hl=en&amp;ref_topic=13128179&amp;sjid=10103587203252669323-NC">Classification labels</a> are used to classify and audit content according to organizational guidelines (“Sensitive”, “Confidential”, etc.) and apply policies, such as <a href="https://support.google.com/a/answer/14767988?sjid=10103587203252669323-NC">data loss prevention (DLP) rules</a>, to protect sensitive information in email messages. Classification labels will be available when using Gmail on the web – support for Gmail on mobile devices will be introduced in the coming months.</p><h3 style="text-align: left;">Who’s impacted</h3><p>Admins and end users</p><h3 style="text-align: left;">Why it’s important</h3><p>Data breaches are increasingly common and costly across all sectors, including enterprises, public sectors, and government institutions. To minimize data exfiltration and better understand the data being shared, organizations need to differentiate between various types of information and their sensitivity levels to apply data protection policies accordingly. By expanding data classification labels to Gmail, Google Workspace provides admins with a more flexible and robust system integrated with data protection capabilities to help organizations effectively categorize and protect sensitive information.&nbsp;</p><p>Specifically,<b> admins</b> can create:</p><p></p><ul style="text-align: left;"><li>New classification labels or extend existing ones enabled in Drive labels for Gmail from the <a href="https://workspaceupdates.googleblog.com/2024/07/label-administration-in-admin-console.html">Label Manager</a>. Labels can be used to&nbsp; denote department names, document types, document status, and other custom categories.&nbsp;</li></ul><p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLLDrH3qbSRNqcZl9oAwX7vJdt21X8JaoA5uH0WWG9OibN1YOQjEK-s_NgxGIiAbNuuLc-cYoEdekEIU4zsD33U7ykmb-nApQqweoD0VUR1k79wEyFf9IpXtbpl6aeHzDVIEUpydvjMzVzP0lIqoXAQNZpPo-WHubEnIDpCNybMiKe3nAIefFwi2qsyuk/s2664/6YEv5PBq6LNd7b3.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1692" data-original-width="2664" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLLDrH3qbSRNqcZl9oAwX7vJdt21X8JaoA5uH0WWG9OibN1YOQjEK-s_NgxGIiAbNuuLc-cYoEdekEIU4zsD33U7ykmb-nApQqweoD0VUR1k79wEyFf9IpXtbpl6aeHzDVIEUpydvjMzVzP0lIqoXAQNZpPo-WHubEnIDpCNybMiKe3nAIefFwi2qsyuk/s16000/6YEv5PBq6LNd7b3.png" /></a></div><div class="separator" style="clear: both; text-align: center;"><i><span style="font-size: xx-small;">The Label Manager tool can be accessed in the Admin console&nbsp; by going to Security &gt; Access and data control</span></i></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: center;"><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;"><ul style="text-align: left;"><li>Data protection rules with classification label as a condition, to apply actions to a message based on its classification. For example, a message will be blocked if it’s classified as ‘Internal’ and is being sent to an external recipient.</li></ul></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgY9OXt5IKYOJ-66T5uOKvVleAC64gNFwXYGasS8Zu7JKveP4XR_yI_sJ8BJ2ztMTuEs9sltOldPHiAD8NVQH8Kd_z0hST3ZupHE7BZTRTO7qHHdZgqs-_rKTwFgCC-jK8_bAwkpzmkId52CnbyN-rgAPSO3ELNJ8WF0GlaMK5PJngMneILPwkaXzYvkVg/s1251/3iRx4zYnCggj9kf.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="821" data-original-width="1251" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgY9OXt5IKYOJ-66T5uOKvVleAC64gNFwXYGasS8Zu7JKveP4XR_yI_sJ8BJ2ztMTuEs9sltOldPHiAD8NVQH8Kd_z0hST3ZupHE7BZTRTO7qHHdZgqs-_rKTwFgCC-jK8_bAwkpzmkId52CnbyN-rgAPSO3ELNJ8WF0GlaMK5PJngMneILPwkaXzYvkVg/s16000/3iRx4zYnCggj9kf.png" /></a></div><div class="separator" style="clear: both; text-align: center;"><div class="separator" style="clear: both;"><i><span style="font-size: xx-small;">Notification about delivery failure due to DLP policy, blocking messages labeled as ‘Confidential’ to be sent to recipients outside of the organization</span></i></div><div class="separator" style="clear: both;"><br /></div><div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;"><ul style="text-align: left;"><li>Data protection rules to automatically apply classification labels to a message, based on its content. For example, a ‘Confidential’ label can be applied to a message if it contains sensitive financial information, such as credit card or bank account numbers.</li></ul></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijmlS6lZ-6VmfPewKYJqOnemsOY4LwqUAMh7MKvPsXENL7fu-4pDbi73zEJgZOnqpd8IO8UwYjcJuNlnIAeb8R8JFuerhxxeJZGebAKdrIyxnav91er-KMx8bQK1wiv8wGbePbAmZ4hRF0TKJuKgIKcJC9PlC4e2W-Q-5BbkORDG8bCmj31ixD_cdqiLY/s993/6v7bSChJXFwcPj3%20(1).png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="829" data-original-width="993" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijmlS6lZ-6VmfPewKYJqOnemsOY4LwqUAMh7MKvPsXENL7fu-4pDbi73zEJgZOnqpd8IO8UwYjcJuNlnIAeb8R8JFuerhxxeJZGebAKdrIyxnav91er-KMx8bQK1wiv8wGbePbAmZ4hRF0TKJuKgIKcJC9PlC4e2W-Q-5BbkORDG8bCmj31ixD_cdqiLY/s16000/6v7bSChJXFwcPj3%20(1).png" /></a></div><div class="separator" style="clear: both; text-align: center;"><i><span style="font-size: xx-small;">Data protection rule with ‘Apply a label’ action. Classification label specified in the rule will be applied to a message, if message contains information matching conditions of the rule</span></i></div><div class="separator" style="clear: both; text-align: center;"><div class="separator" style="clear: both;"><br /></div><div class="separator" style="clear: both;"><div class="separator" style="clear: both; text-align: left;"><ul style="text-align: left;"><li>DLP rules with <a href="https://support.google.com/a/answer/7684332">Confidential Mode</a> as a condition to prevent sending messages with sensitive information, if it is not encrypted (Confidential Mode is not enabled)</li></ul></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj43ao5qezonZCqRMdrdW-RZ6GnycOEQqy48b2h_eNnYf6ZA_2JgGoSU_0E1a75kL0IzwdTv8AH9As5AiJQ9WidlLLjCrf_NESfIm3sTSWv15BwOVY30gOSMTTkRjxpAj404ipHCehvxmgrlFSprqYRs8HnIxH23Yl-eBKYmBAzr7mK9vGmIeVN-IiQPJg/s859/99y6gq4ooB9HPYN.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="835" data-original-width="859" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj43ao5qezonZCqRMdrdW-RZ6GnycOEQqy48b2h_eNnYf6ZA_2JgGoSU_0E1a75kL0IzwdTv8AH9As5AiJQ9WidlLLjCrf_NESfIm3sTSWv15BwOVY30gOSMTTkRjxpAj404ipHCehvxmgrlFSprqYRs8HnIxH23Yl-eBKYmBAzr7mK9vGmIeVN-IiQPJg/s16000/99y6gq4ooB9HPYN.png" /></a></div><div class="separator" style="clear: both; text-align: center;"><i><span style="font-size: x-small;">Data protection rule is set up to detect messages with sensitive information (credit card or passport numbers) and confidential mode disabled in order to enforce sending such info with enhanced protection measures</span></i></div><div class="separator" style="clear: both; text-align: center;"><i><span style="font-size: x-small;"><br /></span></i></div><div><div class="separator" style="clear: both; text-align: left;"><b><br /></b></div><div class="separator" style="clear: both; text-align: left;"><b><br /></b></div><div class="separator" style="clear: both; text-align: left;"><b><br /></b></div><div class="separator" style="clear: both; text-align: left;"><b><br /></b></div><div class="separator" style="clear: both; text-align: left;"><ul style="text-align: left;"><li><b>End users</b> can view and apply Classification Labels when using Gmail on the web.</li></ul></div><div class="separator" style="clear: both; text-align: left;"><div class="separator" style="clear: both; font-size: small; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYjQJkSSqqMKrU2D4eZXBI_Y4xiozQiJ8FIWh96ZrzAT1u6YNXPaj8yKn6EhlPeaVk_w4MDs1Wq5f0J16JpL2B_9_2Wx5sGtGS1d27nJbWTCOuA65KCTrcJIQPm-IeBL48abods_GihFLxp2IMf2i0OUOIjQn9OcQMKzadvaD_Se4ykAwo_Hwlw_wdtx8/s2678/8rngxVe3N8Mc4VV.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1684" data-original-width="2678" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYjQJkSSqqMKrU2D4eZXBI_Y4xiozQiJ8FIWh96ZrzAT1u6YNXPaj8yKn6EhlPeaVk_w4MDs1Wq5f0J16JpL2B_9_2Wx5sGtGS1d27nJbWTCOuA65KCTrcJIQPm-IeBL48abods_GihFLxp2IMf2i0OUOIjQn9OcQMKzadvaD_Se4ykAwo_Hwlw_wdtx8/s16000/8rngxVe3N8Mc4VV.png" /></a></div><div class="separator" style="clear: both; font-size: small; text-align: center;"><i><span style="font-size: xx-small;">Users can apply classification labels to a message, according to the organization’s data governance policies</span></i></div><div class="separator" style="clear: both; text-align: center;"><div style="font-size: small;"><br /></div><div style="font-size: small;"><br /></div></div></div><div class="separator" style="clear: both; text-align: left;"><div class="separator" style="clear: both;"><span style="font-size: x-small;"><i><br /></i></span></div><h3 style="clear: both; text-align: left;">Additional details</h3><div class="separator" style="clear: both;"><ul style="text-align: left;"><li>When Data loss prevention (DLP) rules for Gmail using classification labels either as a condition or as an action, messages are scanned asynchronously. This means that the message is classified, blocked or quarantined after it leaves the sender's mailbox) and before being dispatched to the recipient. In a future release, we plan to provide synchronous support with instant notifications consistent with our synchronous support of <a href="https://workspaceupdates.googleblog.com/2024/10/gmail-data-loss-prevention-enforcement-is-now-instantaneous.html">instant DLP enforcement for Gmail</a>.</li></ul></div><div class="separator" style="clear: both;"><br /></div></div></div></div></div></div></div></div><blockquote style="border: none; margin: 0px 0px 0px 40px; padding: 0px;"><div class="separator" style="clear: both; text-align: center;"><div class="separator" style="clear: both; text-align: center;"><div><div class="separator" style="clear: both; text-align: center;"><div class="separator" style="clear: both;"><div><div class="separator" style="clear: both; text-align: left;"><div class="separator" style="clear: both; text-align: left;">Note that:</div></div></div></div></div></div></div></div></blockquote><div class="separator" style="clear: both; text-align: center;"><div class="separator" style="clear: both; text-align: center;"><div class="separator" style="clear: both; text-align: center;"><div class="separator" style="clear: both;"><div class="separator" style="clear: both; text-align: left;"><div class="separator" style="clear: both;"><ul style="text-align: left;"><ul><li>If the message is blocked as a result of the classification label applied to it, the sender will get a bounce back message.</li><li>If the message is automatically labeled by a DLP rule, the sender will not see the label reflected in the sent message. The recipient will see the automatically applied label the same way as any other classification label applied manually by the sender.</li></ul></ul></div><div class="separator" style="clear: both;"><br /></div><div class="separator" style="clear: both;"><ul style="text-align: left;"><li>Only Badged options list and Multiple Options list (Single select) field types are supported in Gmail. If classification labels are enabled for usage in both Gmail and Drive, and it contains fields that are not supported in Gmail, such as date or persona, Gmail users will see the label only with fields of the supported types.</li></ul></div><div><h3 style="text-align: left;">Getting started</h3><div><ul style="text-align: left;"><li><b>Admins:&nbsp;</b></li><ul><li>Gmail classification labels can be enabled at the domain, group level, or individual user level. You also have the option to enable existing classification labels used in Drive for use in Gmail. The Label Manager tool can be accessed by going to <i>Security &gt; Access and data control</i> or <a href="http://admin.google.com/ac/dc/labels">admin.google.com/ac/dc/labels</a> in the Admin console.&nbsp;</li><li>Visit the Help Center to learn more about <a href="https://support.google.com/a/answer/9292382?hl=en&amp;ref_topic=13128179&amp;sjid=10103587203252669323-NC">getting started with classification labels</a>,&nbsp;<a href="https://support.google.com/a/answer/15517856?sjid=10103587203252669323-NC">Gmail DLP &amp; automatic classification labels</a>, and <a href="https://support.google.com/a/answer/14767988?sjid=10103587203252669323-NC">preventing data leaks in email and attachments</a>.</li><li><b>Note: </b>Labels can be viewed by any admin in your organization with the Manage Labels privilege. They can also be visible to everyone in your organization based on the label’s permissions settings.&nbsp;<br /><br /></li></ul><li><b>End users: </b>If configured by your admin, you’ll see the “Classification” option when composing a new messaging or replying to an existing message — when you open the menu, you can select labels relevant to your message. Visit the Help Center to learn more about <a href="https://support.google.com/mail/answer/15550077">adding classification labels in Gmail</a>.</li></ul></div></div><div><br /></div></div></div></div><div class="separator" style="clear: both; text-align: left;"><h3 style="clear: both; text-align: left;">Rollout pace</h3><div class="separator" style="clear: both;"><ul style="text-align: left;"><li><a href="https://support.google.com/a/answer/172177">Rapid Release and Scheduled Release domains</a>: Extended rollout (potentially longer than 15 days for feature visibility) starting on November 1, 2024</li></ul></div><div class="separator" style="clear: both;"><br /></div><h3 style="clear: both; text-align: left;">Availability</h3><div class="separator" style="clear: both;"><ul style="text-align: left;"><li><b>The Label Manager and manual classification is available to Google Workspace:</b></li><ul><li>Frontline Starter and Standard</li><li>Business Standard and Plus</li><li>Enterprise Standard and Plus</li><li>Education Standard and Education Plus</li><li>Essentials, Enterprise Essentials, and Enterprise Essentials Plus<br /><br /></li></ul><li><b>Data loss prevention rules with labels as a condition or labels as an action are available to:</b></li></ul></div><div class="separator" style="clear: both;"><ul style="text-align: left;"><ul><li>Enterprise Standard and Plus</li><li>Education Fundamentals, Standard, Plus, and the Teaching &amp; Learning Upgrade</li><li>Frontline Standard</li><li>Cloud Identity Premium (in combination with a Workspace Edition eligible for Gmail)</li></ul></ul></div><h3 style="clear: both; text-align: left;">Resources</h3><div class="separator" style="clear: both;"><ul style="text-align: left;"><li><a href="https://support.google.com/a/answer/15517856?sjid=10103587203252669323-NC">Google Workspace Admin Help: Gmail DLP &amp; automatic classification labels (beta)</a></li><li><a href="https://support.google.com/a/answer/9292382?hl=en&amp;ref_topic=13128179&amp;sjid=10103587203252669323-NC">Google Workspace Admin Help: Get started as a classification labels admin</a></li><li><a href="https://support.google.com/a/answer/14767988?sjid=10103587203252669323-NC">Google Workspace Admin Help: Prevent data leaks in email &amp; attachments (beta)</a></li><li><a href="https://support.google.com/mail/answer/15550077">Google Help: Add classification labels in Gmail</a></li></ul></div></div></div><div class="separator" style="clear: both; text-align: left;"><br /></div></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><div><br /></div></div><p><br /></p><div><br /></div>G Suite Updatesnoreply@blogger.com0