
Image: Microsoft
Microsoft has announced significant advancements in data protection for its Edge for Business browser, specifically targeting the challenges of Bring Your Own Device (BYOD) environments and the increasing use of AI in daily workflows. This update aims to empower IT and security teams with enhanced controls to safeguard sensitive organizational data in this evolving landscape.
The blog post highlights that “Cybersecurity threats have become more frequent and sophisticated, making it increasingly challenging for you to protect sensitive organizational data.” To address this, Microsoft is extending the data security controls already available in Edge for Business to personal or unmanaged devices. This means that organizations can now apply nuanced, real-time, and context-aware data security policies to these devices, striking a balance between robust protection and maintaining user productivity.
This enhanced protection is achieved through the powerful combination of Edge for Business, Microsoft Intune, and Microsoft Purview. The blog post explains, “Together, they provide a comprehensive secure enterprise browser solution for BYOD.” Intune plays a crucial role by performing device health checks before granting access to corporate resources, ensuring that only devices meeting specific security standards can access sensitive data. Complementing this, Purview data security controls, now extended to Edge for Business on personal devices, allow for granular control over how corporate data is handled. For instance, as the blog post illustrates, “you can allow employees using personal devices for work to download benefits brochures that do not contain any sensitive information but block the download of records that contain personal contact information or social security numbers.”
Furthermore, Microsoft is addressing the growing concern around data leaks through the use of consumer AI applications. With the increasing integration of AI into daily tasks, organizations are keen to enable user productivity without compromising security. The blog post notes that “with the combination of Edge for Business and Purview, you can prevent users from inadvertently leaking sensitive data through unsanctioned AI app usage.” A new inline protection capability in Purview allows administrators to prevent users from submitting typed prompts containing sensitive data to popular consumer AI apps like ChatGPT, DeepSeek, Google Gemini, and Microsoft Copilot.
The blog post elaborates on how this inline protection works: “Text prompts can be audited and blocked from being sent based on the sensitive content and the risk-level of the user entering the data, helping you maintain control over the data processed by consumer AI apps.” This capability builds upon existing Purview protections in Edge for Business, such as preventing the upload of sensitive files or the copying and pasting of sensitive data into web applications.