Question 3 of 9

You need to prevent any emails that contain information covered by the U.S. Health Insurance Act (HIPAA) from being sent to people outside of your organization unless the messages are sent to an external domain named gitbit.org.

What should you do to set it up?

A Data loss prevention (DLP) policy would prevent data from leaving the company that is covered under the U.K. Data Protection Act.

https://www.gitbit.org/course/ms-500/learn/Preventing-accidental-and-malicious-data-loss-with-DLP-policies-IsPGsme8w

https://www.iorad.com/player/1801811/MS-500---Prevent-any-email-messages-that-contain-data-covered-by-the-U-K--Data-Protection-Act

1. Open the Microsoft 365 Compliance admin center > Policies > Data loss prevention > Policies > Create policy > Medical and health > U.S. Health Insurance Act (HIPAA) Enhanced > Next > Disable all locations except Exchange email > Create or customize advanced DLP rules > add an exception and block emails from going outbound > Save your new policy.