Windows Information Protection
WIP is a solution that is easy to deploy and doesn't get in the way of
the user experience. Just turn on a few policies in your MDM (e.g.:
Microsoft Intune) or System Center Configuration Manager and WIP is
ready to go.
https://blogs.technet.microsoft.com/windowsitpro/2016/06/29/introducing-windows-information-protection/
so it requires intune or SCCM -- enterprise infrastructure