Google Workspace Updates: Categorize content and enhance content protection at scale with Google Drive labels

Update
[February 4, 2022]: We previously stated there would be a full rollout (1–3 days for feature visibility) for these features. This was incorrect — please see below for updated rollout information:
Rollout for the admin configured default labels feature is expected to be complete on February 8, 2022.
Rollout for the automated classification feature is expected to be complete on February 17, 2022.

We apologize for any confusion this may have caused.

What’s changing

Automated classification with Google Workspace DLP and labels-driven sharing restrictions are now generally available. These features were part of a beta we announced last year for enhanced content classification, governance, and data loss prevention (DLP) with Google Drive labels.

A new Admin console setting can now automatically apply up to 5 labels to all new files your users create, or to all newly created files owned by specific parts of your organization.

Configuring automatically applied blank labels by OU in Admin console

A message will prompt end users to fill out required fields in label manager, until the field is completed.

Requiring users to select a label field option in Label Manager

End user experience for an automatically applied label combined with a required field

Automated classification can help organizations automatically add Drive labels to content based on administrator-defined DLP rules and predefined content detectors. DLP administrators can also configure rules that show users a warning any time they attempt to share a file labeled as “Internal,” as well as rules that block external sharing or prevent downloads and printing for all “confidential” files.

Additionally, Admins have the ability to allow end users to change labels applied by DLP, to provide additional flexibility for their organization.

Who’s impacted

Admins and end users

Why you’d use it

You can automatically apply labels to new files. When used in conjunction with required fields in label manager, you can require users to classify their newly created Drive files, leading to strengthened data classification and protection.

Labels in Drive can also be automatically added to files with automated classification based on admin-defined DLP rules and predefined content detectors. This automated classification can help scale data classification and protection efforts by reducing the administrative burden and potential errors associated with manual labels.

Getting started

Admins: This feature will be OFF by default and can be enabled at the domain, OU, and Group levels. Before you can use this feature, you must have turned on Drive labels for your organization and published at least one label in the label manager. Each label’s access controls can be managed at the user, group, and organization level. Visit the Help Center to learn more about managing Drive labels and applying classification labels to new files automatically
End users: There is no end user setting for this feature. Visit the Help Center to learn more about labels and adding labels to files in Drive.

Rollout pace

Default labels

Rapid Release and Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on February 4, 2022

Automated classification

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on February 4, 2022

Availability

Available to Google Workspace Essentials, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, and Nonprofits
Not available to Business Starter, Education Fundamentals, and Frontline, as well as legacy G Suite Basic and Business customers

Friday, January 28, 2022

Categorize content and enhance content protection at scale with Google Drive labels

Update