# DLP rules and PII visibility in Slack Connect

*Slack Administrator Study Guide · Governance, Security and Compliance · Last updated October 21, 2026 · https://www.certifyforce.com/study-guide/slack-administrator/governance-security-and-compliance/dlp-rules-and-pii-visibility-in-slack-connect*

How to limit personally identifiable information in Slack: native DLP rules, actions, scope and blind spots, the DLP dashboard, email display, Slack Connect profile details per organization, and what external organizations' data looks like in exports, the Discovery API and EKM.

- Certification: Salesforce Slack Administrator
- Exam section: Governance, Security and Compliance
- Study guide: https://www.certifyforce.com/study-guide/slack-administrator

**Official exam objective:**

> Given a scenario, assess and determine personally identifiable information (PII) sharing in Slack.

## What the exam expects

- Build a native DLP rule: preconfigured or custom regex, the action (alert, warn, hide) and the scope (Slack Connect, workspaces, conversation types).
- Predict what DLP will not catch (images, profile fields, canvases in Slack Connect) and where warnings cannot appear.
- Act on violations in the DLP dashboard: restore false positives, delete real ones.
- Limit what external organizations see: email display and Slack Connect member profile details, including per-organization customization.
- Explain what exports, the Discovery API and Enterprise Key Management (EKM) do with external people's data.

Key terms:
- **PII:** personally identifiable information, such as national identifiers, card numbers or email addresses.
- **Slack DLP:** native data loss prevention on Enterprise plans, run by members with the DLP Admin system role.
- **Tombstone:** a DLP hide action that keeps a message or file out of view until it is reviewed.
- **Basic details / Standard work details:** the two profile visibility levels for people outside your organization in Slack Connect.
- **Enterprise org:** an Enterprise organization (Enterprise Grid or Enterprise+ plan); DLP is configured in its Organization settings.

## Key facts

| Fact | Detail | Source |
|---|---|---|
| DLP plan and role | Enterprise plans; DLP Admin, assigned by Org Primary Owner or Roles Admin | [Slack DLP](https://slack.com/help/articles/12914005852819-Slack-data-loss-prevention) |
| Preconfigured categories | Credit card numbers, national identifiers, secrets | [Slack DLP](https://slack.com/help/articles/12914005852819-Slack-data-loss-prevention) |
| Custom rules | PCRE regex | [Slack DLP](https://slack.com/help/articles/12914005852819-Slack-data-loss-prevention) |
| DLP actions | Alert only, warn with custom text, hide until reviewed | [Slack DLP](https://slack.com/help/articles/12914005852819-Slack-data-loss-prevention) |
| No warnings on | Canvases and snippets | [Slack DLP](https://slack.com/help/articles/12914005852819-Slack-data-loss-prevention) |
| Not scanned | Images and other non-text files, profile data, canvases in Slack Connect, files over 100 MB | [Slack DLP](https://slack.com/help/articles/12914005852819-Slack-data-loss-prevention) |
| Alert expiry | 90 days | [Slack DLP](https://slack.com/help/articles/12914005852819-Slack-data-loss-prevention) |
| Email display default | Visible to the org and external organizations | [Manage email display](https://slack.com/help/articles/228020667-Manage-email-display) |
| Slack Connect profile default | Basic details: name and photo | [Profile details for Slack Connect](https://slack.com/help/articles/4417558556691-Manage-profile-details-for-Slack-Connect) |
| Per-organization profile setting | Business+ and Enterprise plans | [Profile details for Slack Connect](https://slack.com/help/articles/4417558556691-Manage-profile-details-for-Slack-Connect) |
| Discovery API and emails | Returns external emails regardless of email display | [Slack Connect data management](https://slack.com/help/articles/115004152843-How-data-management-features-apply-to-Slack-Connect) |

## Check yourself

- Why did a DLP rule set to warn record an alert but show no warning on a canvas?
- When should a DLP Admin restore a message instead of deleting it?
- Which email display option keeps addresses visible to employees but hidden from Slack Connect partners?
- What does an export include about people from an external organization?

## Sources

- [Slack data loss prevention](https://slack.com/help/articles/12914005852819-Slack-data-loss-prevention)
- [Manage email display](https://slack.com/help/articles/228020667-Manage-email-display)
- [Manage profile details for Slack Connect](https://slack.com/help/articles/4417558556691-Manage-profile-details-for-Slack-Connect)
- [How data management features apply to Slack Connect](https://slack.com/help/articles/115004152843-How-data-management-features-apply-to-Slack-Connect)
- [A guide to Slack's Discovery APIs](https://slack.com/help/articles/360002079527-A-guide-to-Slacks-Discovery-APIs)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 12 linked practice questions, and unlimited timed mock exams are included with the Slack Administrator pack (USD $19): https://www.certifyforce.com/practice-exams