Data Loss Prevention (DLP)

Data loss prevention (DLP) refers to tools and policies designed to detect and block sensitive data, like customer records, financial data, or trade secrets, from leaving an organization's control, whether through email, file uploads, USB drives, or other channels.

DLP systems scan outgoing content for patterns like credit card numbers or confidential markings and can automatically block, quarantine, or flag a transfer for review. It's a key control for preventing both accidental leaks and deliberate insider data theft.