Microsoft 365 Sensitivity Labels

Microsoft 365 Sensitivity Labels

Note : Sensitivity labels cannot be applied to emails that have already been sent.

As of May 12, sensitivity labels will be available to all employees with a Microsoft 365 A5 or higher license.

Sensitivity labels can be applied directly within Microsoft 365 applications such as Word, Excel, PowerPoint, and Outlook. However, labels are only enforced on:

  • Files stored in SharePoint, Teams, and OneDrive

  • Emails sent through Outlook

Sensitivity labels cannot be applied to files stored outside of these locations.

Employees with Microsoft 365 A5 or higher licenses are required to use sensitivity labels to help protect institutional data in accordance with Guidance on Information Confidentiality Classification (Policy 46).

The following file types are currently supported for labeling:

  • Word: .docx, .docm

  • Excel: .xlsx, .xlsm, .xlsb

  • PowerPoint: .pptx, .ppsx

  • PDF

Users without an employee A5 or higher license will not be able to apply sensitivity labels. However, they may still see the sensitivity label icon and description in the Office apps.

Available Sensitivity Labels

There are four sensitivity labels available: Public, Confidential, Restricted, and Highly Restricted.

Supported files in employee OneDrives (with A5 or higher licenses) will be automatically labeled 'Confidential' in the weeks following deployment. Document owners are responsible for ensuring the sensitivity label applied to a file accurately reflects the sensitivity of its contents.

For help choosing the appropriate label, refer to the Guidance on Information Confidentiality Classification (Policy 46).

label_types.png

Using "Print to PDF" with Sensitivity Labels

What happens to sensitivity labels when I use "Print to PDF" in Microsoft Office apps?

When you use the Print to PDF and Save as Adobe PDF options in the Office apps, the resulting PDF does not retain the original document’s sensitivity label.

Why is this a concern?

Our organization has an auto-labelling policy that applies the default label Confidential to any supported file type (including PDFs) that does not already have a label. This means:

  • If you print a Restricted or Highly Restricted document to PDF, the new PDF will be labelled Confidential, which may understate the sensitivity of the original content.

What should I do instead?

Whenever possible, use the Save As PDF or Export to PDF options in Office apps. These methods preserve the original sensitivity label in the resulting PDF.

  • Word, Excel, PowerPoint: Use File > Save As > PDF or File > Export > Create PDF/XPS Document.

  • Outlook: Outlook does not currently support exporting emails to PDF with sensitivity labels. If you must save an email as a PDF, be aware that using "Print to PDF" will not retain the label, you must manually apply the correct sensitivity label to the PDF via OneDrive, Teams, or SharePoint after printing.

If you’re trying to edit a recurring meeting series in Outlook or Microsoft Teams and encounter the following error:

"Your organization requires you add a sensitivity label to the meeting before you can save it."

…it may be due to a policy change introduced after May 12, when your organization started enforcing mandatory sensitivity labels for meetings.

Why This Happens: 

Before May 12, sensitivity labels were not required for meetings. If a recurring meeting was created before that date, it may not contain any label metadata. When you try to edit the entire series now, Outlook or Teams detects the missing label and blocks the change until a valid sensitivity label is assigned.

How to Fix It

  1. Open the meeting series in your Teams calendar.

  2. Click on the Sensitivity label drop-down (usually near the top of the meeting window).

  3. Choose the appropriate label (e.g., "Internal", "Confidential", or as per your org's policy).

  4. Save the meeting.

FAQ

No. At this time, sensitivity labels are informational only, assisting users with managing the type of data found in documents.

Only Microsoft Office, OneDrive, SharePoint, and Outlook support sensitivity labels. Outlook is the only mail client where labels can be viewed or added.

All documents default to a Confidential label. Refer to Microsoft’s official sensitivity label documentation for detailed instructions on how to change the label. Only one label can be applied at a time.

Teams and SharePoint site owners can change the default label from Confidential to another available label for specific document libraries within their sites.

Applying a new default sensitivity label to a SharePoint document library does not automatically relabel old documents. Documents must be modified (opened and saved) in order to inherit the new default. The label can also be changed manually within the Details pane ( > Details).

Sensitivity labels that have been applied to PDF documents are only visible in the following locations:

  • The Sensitivity label column in a SharePoint library. This column is not enabled by default and must be added to your view.

  • The Details pane ( > Details) in SharePoint and the OneDrive web application.

  • The Info pane ( > Info) in Microsoft Edge. This option is unavailable when the PDF is launched from OneDrive desktop.

To add an existing column without leaving your list or library:

  1. Navigate to the list or library where you want to create the column. 

  2. To the right of the last column name at the top of the list or library, select + Add column or +.

  3. In the pop-up that opens select Show or hide columns.

m365sp_3.png
  1. Scroll down to Sensitivity and check the box to display the column.

m365sp_4.png
  1. Scroll back to the top and select Apply.

m365sp_5.png

Sensitivity labels cannot be viewed in the OneDrive desktop application. The Sensitivity column in OneDrive desktop is unrelated to M365 sensitivity labels.

Sensitivity labels can be added to emails. If an email has attachments, it will default to the same sensitivity label as the attachment.

Labels for meetings and meeting invitations are not available at this time.

When attaching a document with a Restricted or Highly Confidential label, the sensitivity of the email will only update automatically if the document has been attached as a copy and not a sharing link.

Automatic updates to labels based on the sensitivity of attached documents is not supported in New Outlook, Android Outlook, and the Outlook web application on Android.

The labels do persist in the metadata on the file, but the sensitivity label should not appear unless the user that accesses the file is a member of the same tenant and label policy.

Yes. If the individual has a Faculty A5 license and has been provided with any level of editing access (Full Control, Design, Edit, Contribute), they will be able to change the label. Individuals provided with Read-only or Restricted view permissions cannot change the label.

Sensitivity labels may not appear immediately in Excel online, in which case, the default label will be applied after some time. Users can override this setting and manually apply a label to the Excel document.

The label can be edited under the Details pane ( > Details) in SharePoint and the OneDrive web application.

 

Need help?

Contact the IST Service Desk online or 519-888-4567 ext. 44357.

Article feedback

If you’d like to share any feedback about this article, please let us know.