Set up sharing boundaries for ... Note

Set up sharing boundaries for Google Drive with unified data protection rules

Google Workspace is introducing a new unified rule for administrators to configure audience sharing and sensitivity-based data conditions. This single rule enhances security by proactively mitigating insider risks and preventing data exfiltration. Previously, administrators managed sharing controls and data loss prevention policies separately for Google Drive. Now, they can build granular, content-aware sharing boundaries that evaluate data sensitivity and the sharing audience. This allows for policies that prevent sharing between specific audiences based on data sensitivity. The feature offers three audience restriction options: blocking all external sharing, allowing sharing only with a specific allowlist of users, or blocking sharing with a specific denylist of users. Administrators can implement this functionality by selecting Google Drive and the "block sharing" option when configuring data protection rules. There are no end-user settings for this feature. The rollout will be gradual, starting on September 14, 2026, for both Rapid Release and Scheduled Release domains. This capability will be available to various Enterprise and Education editions, as well as Enterprise Essentials and Frontline Standard and Plus. Further details on setting up sharing boundaries are available in the Google Workspace Admin Help Center.