Data Loss Prevention (DLP) is designed to protect sensitive data across all states: at rest, in motion, and in use. DLP solutions monitor, detect, and prevent unauthorized access, sharing, or exfiltration of data.

While encryption protects data at rest and in transit, it does not prevent authorized users from misusing data. Hashing ensures integrity, not confidentiality. Threat modeling identifies risks but does not enforce protection.

DLP tools enforce policies, inspect content, and prevent data leakage through email, web uploads, removable media, and cloud services. They are especially valuable for protecting regulated data such as PII and financial records.

NIST and CIS recognize DLP as a critical control for comprehensive data protection strategies.