Office 365 Automatic DLP Email Encryption coming 1/15/2019

On January 15, 2019, we will be creating a new automatic policy in your tenant that will apply Office 365 Message Encryption to emails that contain sensitive information, which are being sent outside your organization.

Recently we improved Office 365 Message Encryption so that users can send encrypted and protected messages to anyone inside or outside the organization. We are creating this automatic policy so that our customers are protected by default.

This has administrative controls to opt-out or enable and disable.

[How does this affect me?] A new Exchange mail flow rule will be created in your organization that will automatically encrypt emails going outside your organization with the Encrypt-Only policy if they contain the following sensitive types:

• ABA Routing Number
• Credit Card Number
• Drug Enforcement Agency (DEA) Number
• International Classification of Diseases (ICD-9-CM)
• International Classification of Diseases (ICD-10-CM)
• U.S. / U.K. Passport Number
• U.S. Bank Account Number
• U.S. Individual Taxpayer Identification Number (ITIN)
• U.S. Social Security Number (SSN)

[What do I need to do to prepare for this change?] You might want to update end-user documentation and training to prepare people in your organization for this change.

If you would like to opt-out of this change, please follow these steps:

• Connect to Exchange Online PowerShell as a user with the global administrator role (see https://aka.ms/exopowershell)
• Run the following code after authenticating. Set-IRMConfiguration -AutomaticServiceUpdateEnabled $false

If you didn’t opt-out of this change, and the Exchange mail rule has already been created, you can modify the rule by going to Mail Flow rules in the Exchange admin center and modifying the rule “Encrypt outbound sensitive emails (out of box rule)”.

EDIT: Link to tot the post https://docs.microsoft.com/en-us/office365/securitycompliance/new-ome-encryption-policy