External recipients are not receiving Data Protection notification emails when an outbound Data Protection policy is triggered, even though the policy is configured to notify recipients.
This behavior is by design.
The primary reason for this specification is to avoid disclosing internal security policies through notifications.
Please note that recipients of outbound emails will not be notified.