Data Protection Issues

How to Block File Uploads to ChatGPT in Microsoft 365 E5

Phi Hung Vo Oct 9, 2026 869 views

Question details

Organizations want to prevent users from uploading files containing sensitive data to generative AI platforms like ChatGPT.

How to Block File Uploads to ChatGPT in Microsoft 365 E5

Product: Microsoft 365 E5
Device & OS: not provided
Scenario: Configuring data protection policies to block file uploads to external generative AI websites.
Observed behavior: Administrators need to implement and enforce controls restricting data exfiltration to generative AI tools without blocking normal workflow.

Before you start

Ensure you are logged in with Global Administrator or Compliance Administrator privileges in your Microsoft 365 tenant and have access to the Microsoft Purview and Defender portals.

Solution 1Recommended

Configure Microsoft Purview Endpoint DLP Policies

Set up Data Loss Prevention policies in Microsoft Purview to detect and block the upload of sensitive files to specific web domains such as ChatGPT.

Microsoft Purview Data Loss Prevention (DLP) allows you to define policies that protect sensitive information across your organization's endpoints. By targeting specific web browsers and cloud domains, you can effectively block users from pasting or uploading sensitive data into ChatGPT.

Access the Data Loss Prevention menu

Navigate to the Microsoft Purview compliance portal. On the left navigation pane, select 'Data loss prevention' and then click on 'Policies'.

Create a new DLP policy

Click 'Create policy'. Choose the category and specific sensitive information types you want to protect (e.g., Financial, Medical and Health, or Custom types), and give your policy a descriptive name.

Set the policy location to Endpoint devices

In the 'Locations to apply the policy' step, toggle on 'Endpoint devices'. You can choose to apply this to all users or scope it to specific users and groups.

Configure advanced rule settings

Create an advanced DLP rule. Under 'Actions', select 'Audit or restrict activities when users access sensitive sites in Edge browser' (or configure supported third-party browsers via endpoint extensions).

Block the ChatGPT domain

Add the specific domains you wish to restrict (e.g., chatgpt.com) to the restricted cloud service domains group. Set the activity action for uploading or pasting to 'Block'.

Configure Microsoft Purview Endpoint DLP Policies

Test in Audit Mode: Always select 'Test it out first' (Audit mode) before turning the policy on immediately. This allows you to monitor the impact on user workflows and refine the policy without blocking legitimate business operations.

Solution 2

Implement Session Controls via Defender for Cloud Apps

Use Microsoft Defender for Cloud Apps to monitor and block real-time file uploads to unsanctioned generative AI applications.

Free Microsoft Office alternative

Looking for a Secure and Lightweight Office Suite? Try WPS Office

While Microsoft 365 provides complex enterprise security controls, small businesses and individual professionals may prefer a simpler, highly compatible, and cost-effective office suite. WPS Office offers powerful tools for word processing, spreadsheets, and presentations without the heavy administrative overhead.

1. Download the installer: Visit the official WPS Office website and click the free download button for your operating system.
2. Install the software: Run the downloaded installer and follow the simple on-screen instructions to set up the office suite.
3. Start creating securely: Open WPS Office to immediately start creating, editing, and saving your documents securely on your local device or preferred cloud storage.

Highly compatible with Microsoft Office formats (DOCX, XLSX, PPTX) ensuring seamless file sharing.Lightweight installation with very low system resource consumption.Built-in PDF editing, conversion, and annotation tools.Completely free to download with a familiar user interface for quick adoption.

microsoft office alternative - wps office

Frequently Asked Questions

Does blocking file uploads to ChatGPT affect Microsoft Copilot?

No. Microsoft Copilot for Microsoft 365 operates within your organization's secure tenant boundary. Blocking external AI sites like ChatGPT via Purview DLP or Defender does not impact your internal, secure usage of Microsoft Copilot.

Can I block specific users from uploading files rather than the entire organization?

Yes. When configuring Microsoft Purview DLP or Defender for Cloud Apps policies, you can scope the policy to target specific users, Active Directory groups, or specific endpoints instead of applying it tenant-wide.

Are these data protection controls available in Microsoft 365 E3?

While basic DLP features are available in E3, advanced Endpoint DLP controls (like restricting specific browser activities) and Microsoft Defender for Cloud Apps session controls generally require a Microsoft 365 E5 license or specific E5 security add-ons.

Microsoft Office Security Issues