PII - Emails

[Alastairb25]

Hi All,

 

How would you handle this.. I have Staff who simply do not appreciate GDPR full stop.

 

So today I get a PII alert from an outbound email sent by my DSL, the email chain includes various NHS numbers sent via email, the chain was started by our County Council, it also includes

 

Police, NHS Safeguarding, various NHS Trusts, a Housing association, Probation, another School and Social Worker.

 

I will no doubt get back how else can they organise Teams meetings etc

 

The Council already has Egress, as do we.. 

 

 

Thanks,

Alastair

 

 

[DGardiner]

if you have it globaly can you not detect pii and add the egress gateway stuff to send it via egress gateway

[Alastairb25]

47 minutes ago, DGardiner said:

if you have it globaly can you not detect pii and add the egress gateway stuff to send it via egress gateway

We only have one license for the DSL

 

The idea is they should be only one sending sensitive info

The Council also have it and you get a license if they send to you in order to reply back

 

Unsure about that, we have traditionally used it via the Web interface or Outlook addin

[Ditto]

A reflective question, but is egress better for protecting PII than a correctly configured M365 Outlook application.

[George_ARO]

1 hour ago, Ditto said:

A reflective question, but is egress better for protecting PII than a correctly configured M365 Outlook application.

 

 

It really depends on the level of protection you're aiming for. If your priority is purely detecting PII within emails, then M365 DLP policies can do a solid job. But if your strategy also needs to cover human error - misaddressed emails, incorrect attachments, Cc/Bcc mistakes, and contextual encryption - then something more advanced, like Egress, is worth a look.

 

Now they've been acquired by KnowBe4, the human risk management side has developed a lot - we've had great customer feedback on the integration (automated simulations/training assigned based on the types of phishing threats a user actually receives etc.).

Edited July 17, 2025 by George_ARO