Technology and rules that detect and block sensitive data from leaving an organization through email, uploads, or removable media.
Data loss prevention inspects content in motion, at rest, and in use to stop confidential or regulated data, such as customer records or source code, from being sent or copied to unauthorized destinations. Policies define what is sensitive and what action to take.
DLP supports both information security and data protection obligations, but it works best alongside classification and awareness rather than as a standalone control.
Related frameworks
KaitoSec