Which aspect of EPP are you submitting for?
Endpoint Protector Server
What is a one sentence summary of your feature request?
Act of printing image files to virtual files must be logged.
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
Extend print/print-to-PDF detection and logging in Content Aware Protection to image files (JPG, PNG, HEIC, BMP, TIFF, etc.) so that converting screenshots and scanned images to PDF through a virtual printer is logged and controlled in the same way as printing Office documents.
Why this is a data leakage path
Image-to-PDF is the standard way to launder screen content into a portable document:
A user takes a screenshot (or photographs the screen with a phone) of a confidential spreadsheet, customer list, source code, or approval document. EPP may block the original file, but the screenshot is a new image with no origin.
The user prints the image to PDF. Because the print job is not logged, the resulting PDF is created with no trace.
The PDF is then a normal document that can be renamed, merged, or moved. Even if a later upload is blocked, there is no audit record linking it back to the print action, and OCR-based CAP rules only apply if the PDF is subsequently inspected at another exit point.
I hope the related features are implemented on Windows, macOS, and Linux.
How do you currently solve the challenges you have by not having this feature?
Block virtual PDF printers entirely for high-risk groups. This also blocks legitimate PDF creation from Office documents and is rejected by business users.
Rely on Print Screen and clipboard blocking in CAP to reduce screenshot creation. This does not cover images captured with a phone, images received by email or messenger, or scanned files, and does not help once an image already exists on the endpoint.