DLP in the AI Era: how much data loss does DLP actually prevent?

For twenty years, security teams have carried the burden of DLP, through alert fatigue and exceptions written under business pressure, on the promise that it prevents data loss. The Cloud Security Alliance surveyed 433 IT and security professionals to find out what DLP actually does. 73% of respondents had a confirmed data loss incident in the past 24 months, and DLP only blocked 16% of those before the data left the organization.

As employees bring AI tools into their everyday work, GenAI now ranks as the top exfiltration risk at 48%, and security teams need DLP that prevents data loss more than they ever have. AI is also what makes that possible, giving teams ways to run DLP that the last twenty years of legacy tools couldn’t.

In this live session, CSA and Jazz take the findings from DLP in the AI Era and turn them into actionable advice for the program you’re running today. You’ll learn how to: - Benchmark your DLP program against 433 peers, from false-positive rates (54% report rates above half) to how often enforcement gets softened under business pressure. - Reduce blind spots by mapping your controls to the riskiest exfiltration vectors. Only 22% strictly block GenAI, while removable media (USB sticks etc.), the channel deemed the least risky, is blocked hardest. - Close the GenAI reporting gap, since only 29% of teams can produce a routine 30-day report of sensitive data sent to GenAI tools.

Jazz commissioned CSA to develop the survey and report, financed the project, and co-developed the questionnaire with CSA research analysts. CSA conducted the survey online in June and July 2026 and CSA’s research analysts performed the data analysis and interpretation.