What’s changing
Automated classification with Google Workspace DLP and labels-driven sharing restrictions are now generally available. These features were part of a beta we announced last year for enhanced content classification, governance, and data loss prevention (DLP) with Google Drive labels.
A new Admin console setting can now automatically apply up to 5 labels to all new files your users create, or to all newly created files owned by specific parts of your organization.
Configuring automatically applied blank labels by OU in Admin console
A message will prompt end users to fill out required fields in label manager, until the field is completed.
Requiring users to select a label field option in Label Manager
End user experience for an automatically applied label combined with a required field
Automated classification can help organizations automatically add Drive labels to content based on administrator-defined DLP rules and predefined content detectors. DLP administrators can also configure rules that show users a warning any time they attempt to share a file labeled as “Internal,” as well as rules that block external sharing or prevent downloads and printing for all “confidential” files.
Additionally, Admins have the ability to allow end users to change labels applied by DLP, to provide additional flexibility for their organization.
Who’s impacted
Admins and end users
Why you’d use it
You can automatically apply labels to new files. When used in conjunction with required fields in label manager, you can require users to classify their newly created Drive files, leading to strengthened data classification and protection.
Labels in Drive can also be automatically added to files with automated classification based on admin-defined DLP rules and predefined content detectors. This automated classification can help scale data classification and protection efforts by reducing the administrative burden and potential errors associated with manual labels.
Getting started
- Admins: This feature will be OFF by default and can be enabled at the domain, OU, and Group levels. Before you can use this feature, you must have turned on Drive labels for your organization and published at least one label in the label manager. Each label’s access controls can be managed at the user, group, and organization level. Visit the Help Center to learn more about managing Drive labels and applying classification labels to new files automatically
- End users: There is no end user setting for this feature. Visit the Help Center to learn more about labels and adding labels to files in Drive.
Rollout pace
- Rapid Release and Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on January 28, 2022
Availability
- Available to Google Workspace Essentials, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, and Nonprofits
- Not available to Business Starter, Education Fundamentals, and Frontline, as well as G Suite Basic and Business customers
Resources
- Google Cloud Security Blog: Google Workspace delivers new levels of trusted collaboration for a hybrid work world
- Google Workspace Admin Help: Manage Drive labels
- Google Workspace Admin Help: Add labels to files in Google Drive
- Google Workspace Admin Help: Use DLP for Drive to prevent data loss
- Google Workspace Updates Blog: Enhanced content classification, governance, and data loss prevention (DLP) with Google Drive labels