What changed: Through Policy-Based Enforcement, integrated with the Workspace Rules Engine, admins can set rules to automatically apply client-side encryption (CSE) to sensitive Docs, Sheets, Slides, Microsoft Office files, PDFs and images across My Drive and shared drives; encryption is enforced in place, preserving the file's original URL, and users see an in-product notification when opening an encrypted file.
Who is affected
Google Workspace customers on Enterprise Plus with the Assured Controls or Assured Controls Plus add-on who have enrolled in the Policy-Based Enforcement beta.
What it means for your business
For businesses using Drive, Docs, Sheets and Slides with an Assured Controls add-on, this means sensitive files can now be encrypted automatically, in place, under admin-defined rules instead of manual encrypted copies.
What to watch
No mandatory action is required right now. If you hold an Assured Controls or Assured Controls Plus add-on, consider applying for the Policy-Based Enforcement beta, and reassess once the feature reaches general availability.
Timing
The source gives no firm effective date; the feature is in beta and already available now to eligible allowlisted customers.