Core PII detection patterns for Australian Privacy Act 1988 compliance. Covers government identifiers, healthcare numbers, business identifiers, and personal contact information.
Detects Australian Business Numbers (ABNs), which are unique 11-digit identifiers issued by the Australian Business Register to entities carrying on a business in Australia. ABNs are commonly formatted as groups of 2-3-3-3 digits separated by spaces or hyphens. The ABN includes a check digit mechanism, but this pattern relies on format matching combined with corroborative evidence rather than algorithmic validation.
Detects Centrelink Customer Reference Number (CRN) patterns consisting of 9 digits followed by a letter.
Detects Australian Company Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Australian Medicare card numbers, which are issued to Australian citizens and permanent residents for access to subsidised healthcare under the Medicare system. The number consists of 10 digits: the first digit is between 2 and 6, followed by 8 additional digits and a single check digit. Numbers are commonly formatted as groups of 4-5-1 digits separated by spaces or hyphens.
Identifies Australian driver's licence numbers across all 8 states and territories using state-specific digit/letter formats. State context provided via regex-based jurisdiction matching rather than keyword lists. Includes generic fallback tier.
Detects NDIS Participant Number patterns. A 9-digit number starting with the prefix 43.
Identifies Australian Tax File Numbers (TFNs) — unique nine-digit identifiers issued by the Australian Taxation Office. Uses Func_australian_tax_file_number validator with AllDigitsSameFilter and TextMatchFilter to exclude known test values.
Identifies Australian passport numbers using a broad letter-prefix pattern covering single-letter and two-letter series. Requires corroborative evidence from travel-credential and issuing-nation keywords.
Identifies electronic mail addresses in RFC-compatible local-part@domain.tld format. Requires valid top-level domain of 2+ characters. Uses word-boundary anchoring distinct from substring matching.