Skip to content

Commit

Permalink
Merging changes synced from https://github.com/MicrosoftDocs/microsof…
Browse files Browse the repository at this point in the history
…t-365-docs-pr (branch live)
  • Loading branch information
Learn Build Service GitHub App authored and Learn Build Service GitHub App committed Aug 26, 2024
2 parents 35ad43c + 93928a2 commit 265bd8d
Show file tree
Hide file tree
Showing 17 changed files with 185 additions and 64 deletions.
5 changes: 5 additions & 0 deletions .openpublishing.redirection.enterprise.json
Original file line number Diff line number Diff line change
Expand Up @@ -1384,6 +1384,11 @@
"source_path": "microsoft-365/enterprise/assign-per-user-skype-for-business-online-policies-with-microsoft-365-powershell.md",
"redirect_url": "/microsoft-365/enterprise/index",
"redirect_document_id": false
},
{
"source_path": "microsoft-365/enterprise/enabling-sp-multigeo-satellite-geolocation.md",
"redirect_url": "/microsoft-365/enterprise/index",
"redirect_document_id": false
}
]
}
2 changes: 2 additions & 0 deletions microsoft-365/archive/TOC.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,8 @@
href: archive-overview.md
- name: Admin setup
href: archive-setup.md
- name: Privacy, security, & compliance
href: archive-privacy-security.md
- name: Pricing model
href: archive-pricing.md
- name: Archive states
Expand Down
67 changes: 67 additions & 0 deletions microsoft-365/archive/archive-privacy-security.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,67 @@
---
title: Privacy, security, and compliance in Microsoft 365 Archive
ms.author: chucked
author: chuckedmonson
manager: jtremper
audience: admin
ms.reviewer: sreelakshmi
ms.date: 08/26/2024
ms.topic: conceptual
ms.service: microsoft-365-archive
search.appverid:
ms.collection:
- essentials-privacy
- essentials-security
- essentials-compliance
ms.localizationpriority: medium
description: Learn about privacy, security, and compliance in Microsoft 365 Archive.
---

# Privacy, security, and compliance in Microsoft 365 Archive

Microsoft is transparent about the specific policies, operational practices, and technologies that help you ensure the privacy, security, and compliance of your data across Microsoft 365 Archive.

- Microsoft respects the privacy and ownership of data you use.

- None of your organization's data is used or transferred by Microsoft to train AI models, large-language models, or any other models.

- Your data remains securely within your organization’s tenant.

## Privacy

Privacy is built into all Microsoft 365 Archive experiences. Microsoft 365 Archive services adhere to the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) and follow Microsoft's compliance with [General Data Protection Regulation](/compliance/regulatory/gdpr) and the [Microsoft EU Data Boundary](https://www.microsoft.com/trust-center/privacy/european-data-boundary-eudb).

Microsoft 365 Archive inherits privacy features and settings from Microsoft 365 and SharePoint, where applicable.

### GDPR compliance

Microsoft 365 Archive supports compliance with [General Data Protection Regulation](/compliance/regulatory/gdpr) (GDPR) requirements.

### Data residency

Data residency refers to the geographic location where data is stored at rest. The way that data is transferred and stored in Microsoft 365 Archive is defined in the [Microsoft Products and Services Data Protection Addendum](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) (DPA).

All data within Microsoft 365 Archive is stored within the customer tenant for any given service and follows the standard Microsoft 365 data storage guidelines by available geography.

## Security

Microsoft 365 Archive works with and integrates into Microsoft 365. This means that the Microsoft 365 security capabilities—such role-based access, identity and app management, and others—apply to Microsoft 365 Archive.

## Compliance

Microsoft offers a [comprehensive set of compliance offerings](/compliance) to help your organization comply with national, regional, and industry-specific requirements governing the collection and use and data.

Microsoft 365 Archive is also covered under the [Microsoft Product Terms](https://www.microsoft.com/licensing/docs/view/Product-Terms) and [Data Protection Agreement](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA?year=2021#:%7E:text=Microsoft%20Products%20and%20Services%20Data%20Protection%20Addendum%20%28DPA%29,to%20the%20Product%20Terms%20site%20%28and%20formerly%20OST%29) (DPA). Learn more on the [Microsoft Trust Center](https://www.microsoft.com/trustcenter).

For more detailed information, see the following resources:

- **Microsoft 365**[Quick tasks for getting started with compliance in Microsoft Purview](/purview/compliance-quick-tasks)

- **Microsoft SharePoint**[Plan compliance requirements for SharePoint and OneDrive](/SharePoint/compliant-environment)

- **Microsoft Graph**[Use the Microsoft Graph compliance and privacy APIs](/graph/api/resources/complianceapioverview)

- **Microsoft Entra ID**[Microsoft Entra security baseline for Microsoft Entra ID](/security/benchmark/azure/baselines/aad-security-baseline)

- **Azure**[Azure, Dynamics 365, Microsoft 365, and Power Platform compliance offerings](/azure/compliance/offerings/)

4 changes: 3 additions & 1 deletion microsoft-365/archive/index.yml
Original file line number Diff line number Diff line change
Expand Up @@ -54,10 +54,12 @@ landingContent:
url: archive-end-user.md

# Card 4
- title: Security & compliance
- title: Data privacy & protection
linkLists:
- linkListType: overview
links:
- text: Privacy, security, & compliance
url: archive-privacy-security.md
- text: Compliance features
url: archive-compliance.md

Expand Down
2 changes: 2 additions & 0 deletions microsoft-365/backup/TOC.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,8 @@
href: backup-overview.md
- name: Admin setup
href: backup-setup.md
- name: Privacy, security, & compliance
href: backup-privacy-security.md
- name: Billing & invoice management
href: backup-billing.md
- name: Pricing model
Expand Down
3 changes: 3 additions & 0 deletions microsoft-365/backup/backup-billing.md
Original file line number Diff line number Diff line change
Expand Up @@ -121,3 +121,6 @@ To view tags:
![Screenshot of the recommended view to see costs by resources in Microsoft Cost Management.](../media/m365-backup/backup-cost-by-resources-view.png)

5. Set up budget alerts on cost by following the steps in the [Cost Management public APIs](/rest/api/cost-management/operation-groups).

> [!WARNING]
>The **MailboxDbGuid** tag in the Azure consumption report is intended for Microsoft internal use only. We recommend that you do not rely on it because its value might change. Note that this is different from the MailboxId.
67 changes: 67 additions & 0 deletions microsoft-365/backup/backup-privacy-security.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,67 @@
---
title: Privacy, security, and compliance in Microsoft 365 Backup
ms.author: chucked
author: chuckedmonson
manager: jtremper
audience: admin
ms.reviewer: sreelakshmi
ms.date: 08/26/2024
ms.topic: conceptual
ms.service: microsoft-365-backup
search.appverid:
ms.collection:
- essentials-privacy
- essentials-security
- essentials-compliance
ms.localizationpriority: medium
description: Learn about privacy, security, and compliance in Microsoft 365 Backup.
---

# Privacy, security, and compliance in Microsoft 365 Backup

Microsoft is transparent about the specific policies, operational practices, and technologies that help you ensure the privacy, security, and compliance of your data across Microsoft 365 Backup.

- Microsoft respects the privacy and ownership of data you use.

- None of your organization's data is used or transferred by Microsoft to train AI models, large-language models, or any other models.

- Your data remains securely within your organization’s tenant.

## Privacy

Privacy is built into all Microsoft 365 Backup experiences. Microsoft 365 Backup services adhere to the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) and follow Microsoft's compliance with [General Data Protection Regulation](/compliance/regulatory/gdpr) and the [Microsoft EU Data Boundary](https://www.microsoft.com/trust-center/privacy/european-data-boundary-eudb).

Microsoft 365 Backup inherits privacy features and settings from Microsoft 365 and SharePoint, where applicable.

### GDPR compliance

Microsoft 365 Backup supports compliance with [General Data Protection Regulation](/compliance/regulatory/gdpr) (GDPR) requirements.

### Data residency

Data residency refers to the geographic location where data is stored at rest. The way that data is transferred and stored in Microsoft 365 Backup is defined in the [Microsoft Products and Services Data Protection Addendum](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) (DPA).

All data within Microsoft 365 Backup is stored within the customer tenant for any given service and follows the standard Microsoft 365 data storage guidelines by available geography.

## Security

Microsoft 365 Backup works with and integrates into Microsoft 365. This means that the Microsoft 365 security capabilities—such role-based access, identity and app management, and others—apply to Microsoft 365 Backup.

## Compliance

Microsoft offers a [comprehensive set of compliance offerings](/compliance) to help your organization comply with national, regional, and industry-specific requirements governing the collection and use and data.

Microsoft 365 Backup is also covered under the [Microsoft Product Terms](https://www.microsoft.com/licensing/docs/view/Product-Terms) and [Data Protection Agreement](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA?year=2021#:%7E:text=Microsoft%20Products%20and%20Services%20Data%20Protection%20Addendum%20%28DPA%29,to%20the%20Product%20Terms%20site%20%28and%20formerly%20OST%29) (DPA). Learn more on the [Microsoft Trust Center](https://www.microsoft.com/trustcenter).

For more detailed information, see the following resources:

- **Microsoft 365**[Quick tasks for getting started with compliance in Microsoft Purview](/purview/compliance-quick-tasks)

- **Microsoft SharePoint**[Plan compliance requirements for SharePoint and OneDrive](/SharePoint/compliant-environment)

- **Microsoft Graph**[Use the Microsoft Graph compliance and privacy APIs](/graph/api/resources/complianceapioverview)

- **Microsoft Entra ID**[Microsoft Entra security baseline for Microsoft Entra ID](/security/benchmark/azure/baselines/aad-security-baseline)

- **Azure**[Azure, Dynamics 365, Microsoft 365, and Power Platform compliance offerings](/azure/compliance/offerings/)

8 changes: 8 additions & 0 deletions microsoft-365/backup/index.yml
Original file line number Diff line number Diff line change
Expand Up @@ -56,6 +56,14 @@ landingContent:
url: backup-offboarding.md

# Card 4
- title: Data privacy & protection
linkLists:
- linkListType: overview
links:
- text: Privacy, security, & compliance
url: backup-privacy-security.md

# Card 5
- title: More solutions
linkLists:
- linkListType: overview
Expand Down
15 changes: 13 additions & 2 deletions microsoft-365/business-premium/m365bp-security-overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ manager: deniseb
audience: Admin
ms.topic: overview
ms.service: microsoft-365-business-security
ms.date: 05/31/2024
ms.date: 08/26/2024
ms.localizationpriority: medium
ms.collection:
- M365-Campaigns
Expand All @@ -28,7 +28,18 @@ description: "Security overview for Microsoft 365 Business Premium, which provid

:::image type="content" source="media/mission2.png" alt-text="Diagram with Boost Your Security Protection highlighted." lightbox="media/mission2.png":::

After you have completed the basic setup process for [Microsoft 365 Business Premium](m365-business-premium-setup.md) (or [Microsoft 365 for Campaigns](m365-campaigns-setup.md)), your next step is to set up and configure your security protection. Microsoft 365 Business Premium includes security, compliance, identity, and management capabilities to help protect user accounts, email, files, and devices. Use this guidance to complete the following tasks:
After you have completed the basic setup process for [Microsoft 365 Business Premium](m365-business-premium-setup.md) (or [Microsoft 365 for Campaigns](m365-campaigns-setup.md)), your next step is to set up and configure your security protection.

## Video: Get started with your security settings

Watch the following video for a brief overview of initial security settings to configure.
<br/>

> [!VIDEO https://www.microsoft.com/videoplayer/embed/RW1nZxu]
## Configure your security protection in Microsoft 365 Business Premium

Microsoft 365 Business Premium includes security, compliance, identity, and management capabilities to help protect user accounts, email, files, and devices. Use this guidance to complete the following tasks:

1. [Turn on multifactor authentication for your organization](m365bp-turn-on-mfa.md).
2. [Protect your admin accounts](m365bp-protect-admin-accounts.md).
Expand Down

This file was deleted.

6 changes: 3 additions & 3 deletions microsoft-365/frontline/ehr-admin-epic.md
Original file line number Diff line number Diff line change
Expand Up @@ -80,15 +80,15 @@ Review the [Epic-Microsoft Teams Telehealth Integration Guide](https://galaxy.ep
- Epic version November 2018 or later.
- Users have an appropriate Microsoft 365 or Office 365 license that includes Teams meetings.
- Teams is adopted and used in your healthcare organization.
- Identified a person in your organization who is a Microsoft 365 global admin with access to the [Teams admin center](https://admin.teams.microsoft.com).
- Identified a person in your organization who is a Microsoft 365 Global Administrator with access to the [Teams admin center](https://admin.teams.microsoft.com).
- Your systems meet all [software and browser requirements](/microsoftteams/hardware-requirements-for-the-teams-app) for Teams.

> [!IMPORTANT]
> Make sure you complete the pre-integration steps and all prerequisites are met before you move forward with the integration.
The integration steps are performed by the following people in your organization:

- **Microsoft 365 global admin**: The main person who is responsible for the integration. The admin configures the connector, enables SMS (if needed), and adds the Epic customer analyst who will be approving the configuration.
- **Microsoft 365 Global Administrator**: The main person who is responsible for the integration. The admin configures the connector, enables SMS (if needed), and adds the Epic customer analyst who will be approving the configuration.
- **Epic customer analyst**: A person in your organization who has login credentials to Epic. They approve the configuration settings entered by the admin and provide the configuration records to Epic.

The Microsoft 365 admin and Epic customer analyst can be the same person.
Expand Down Expand Up @@ -152,7 +152,7 @@ To enable SMS notifications, your Microsoft 365 admin completes the following st

3. Some telephone carriers now [require unverified toll numbers to be verified](/azure/communication-services/concepts/sms/sms-faq#sms-to-us-phone-numbers). This requirement became effective October 1, 2022. Some carriers are following this more strictly than others.

You'll need to [register your generated phone number in this form](https://forms.office.com/pages/responsepage.aspx?id=v4j5cvGGr0GRqy180BHbR0NW3g8C-tRNlyVpwWkCiS1UOEFCVTRHSFMwRk9BVTg3MVdZQlVCNEI4SS4u). This ensures none of your SMS messages will be blocked when sent to US phone numbers.
You'll need to [register your generated phone number in this form](https://forms.office.com/pages/responsepage.aspx?id=v4j5cvGGr0GRqy180BHbR0NW3g8C-tRNlyVpwWkCiS1UOEFCVTRHSFMwRk9BVTg3MVdZQlVCNEI4SS4u). This ensures none of your SMS messages will be blocked when sent to US phone numbers.

4. To link the phone number to a FHIR base URL, under **Phone number** in the **SMS configuration** section, select the number. Do this for each FHIR base URL for which you want to enable SMS notifications.

Expand Down
4 changes: 2 additions & 2 deletions microsoft-365/frontline/ehr-admin-oracle-health.md
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@ Oracle Health integration is currently only available in the United States.
- An active subscription to Microsoft Cloud for Healthcare or a subscription to Microsoft Teams EHR connector standalone offer.
- Users have an appropriate Microsoft 365 or Office 365 license that includes Teams meetings.
- Teams is adopted and used in your healthcare organization.
- Identified a person in your organization who is a Microsoft 365 global admin with access to the [Teams admin center](https://admin.teams.microsoft.com).
- Identified a person in your organization who is a Microsoft 365 Global Administrator with access to the [Teams admin center](https://admin.teams.microsoft.com).
- Your systems meet all [software and browser requirements](/microsoftteams/hardware-requirements-for-the-teams-app) for Teams.
- Oracle Health version November 2018 or later
- Contact Microsoft at [email protected] to get enrolled in the Oracle Cerner Code program.
Expand All @@ -77,7 +77,7 @@ The connector setup requires that you:
- [Review and finish the configuration](ehr-admin-cerner.md#review-and-finish-the-configuration)

> [!IMPORTANT]
> These steps must be completed by the Microsoft 365 global admin in your organization.
> These steps must be completed by the Microsoft 365 Global Administrator in your organization.
### Launch the EHR connector configuration portal

Expand Down
2 changes: 1 addition & 1 deletion microsoft-365/frontline/ehr-connector-report.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ ms.date: 06/26/2024

The Microsoft Teams Electronic Health Record (EHR) connector Virtual Appointments report in the Microsoft Teams admin center gives you a quick and easy way to view Teams EHR-integrated virtual appointments usage in your organization.

To view the report, you must be a Teams admin, Global reader, Report reader, or Global admin.
To view the report, you must be a Teams Administrator, Global Reader, Reports Reader, or Global Administrator.

> [!IMPORTANT]
> Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use a less-privileged role.
Expand Down
Loading

0 comments on commit 265bd8d

Please sign in to comment.