# What is Data Loss Prevention (DLP)?

> Data loss prevention (DLP) is a set of policies and technical capabilities used to identify sensitive data, monitor how it is handled, and prevent or record unauthorized disclosure or transfer.

- Canonical URL: https://yellowcube.eu/glossary/data-loss-prevention/
- Publisher: Yellow Cube
- Language: en
- Contact: hello@yellowcube.eu

## Content

DLP controls may operate on stored data, network and cloud communications, email, and endpoint actions such as copying, printing, uploading, or moving files to removable media.

Detection can use labels, exact data matching, patterns, document fingerprints, context, or behavior. Responses range from warning and logging to encryption, quarantine, approval, or blocking. Reliable outcomes depend on knowing which data matters and understanding legitimate business use.

### Key points

- **Data at rest:** Discover and assess information in repositories, endpoints, databases, and cloud storage.
- **Data in motion:** Inspect or govern supported email, web, network, API, and cloud transfers.
- **Data in use:** Monitor supported endpoint and application actions involving sensitive information.
- **Important limitation:** DLP produces both false positives and false negatives. It can miss encrypted or transformed content, unsupported channels, photographs, novel data, and activity that policy incorrectly permits.
- **Operational caution:** Overly broad blocking disrupts work and encourages bypass; policies need owners, exceptions, tuning, and investigation procedures.

### Related terms

[Data classification](<https://yellowcube.eu/glossary/data-classification/>) · [Data exfiltration](<https://yellowcube.eu/glossary/data-exfiltration/>) · [Insider threat](<https://yellowcube.eu/glossary/insider-threat/>) · [Email security](<https://yellowcube.eu/glossary/email-security/>) · [Encryption](<https://yellowcube.eu/glossary/encryption/>) · [File-sharing security](<https://yellowcube.eu/glossary/file-sharing-security/>) · [Insider risk management](<https://yellowcube.eu/glossary/insider-risk-management/>)

### Sources

[NIST glossary: Data Loss Prevention](https://csrc.nist.gov/glossary/term/data_loss_prevention) · [NIST SP 800-215: Secure Enterprise Network Landscape](https://csrc.nist.gov/pubs/sp/800/215/final)

## Attribution and scope

This Markdown representation is generated from the same approved content records as the canonical HTML page. Cite the canonical URL above when referencing this material. Product and service descriptions are informational; confirm project-specific requirements with Yellow Cube.