Packages / Health And PHI
Clinical, patient, healthcare, medical, health-system, and PHI-related data.
Detects pre-release adoption records including birth parent identities, adoptee matching assessments, placement recommendations, relinquishment consents, and contact vetoes under the Adoption Act 2009 (Qld). These records contain information that individuals have a legal right to control — premature or unauthorised disclosure can cause profound emotional harm and breach court-sealed orders.
Client files kept by aged care and home support providers, including council-run Commonwealth Home Support Programme (CHSP) and Support at Home services funded under the Aged Care Act 2024 (Cth): client intake and profile records, care needs assessments, care plans and home support plans that tie a named older person (name, date of birth, My Aged Care ID or client number) to care needs, medical conditions, medications, mobility and falls risk, and to a carer, next of kin or representative. Serious incident (SIRS) notifications are covered by au-aged-care-serious-incident-notification and are not the target here. Program manuals, provider guidance, blank intake forms and training case studies are decoys.
Reportable incident notifications and records under the aged care Serious Incident Response Scheme (SIRS), as continued by the Aged Care Act 2024 (Cth) and the Aged Care Rules 2025 from 1 November 2025, for a named older person receiving funded aged care services (residential care homes and services in home or community settings, including Support at Home). Covers the eight reportable incident types (unreasonable use of force, unlawful sexual contact or inappropriate sexual conduct, psychological or emotional abuse, unexpected death, stealing or financial coercion by a staff member, neglect, inappropriate use of a restrictive practice, unexplained absence from care) and the Priority 1 (report within 24 hours) / Priority 2 (report within 30 calendar days) classification. A populated record names the provider, the older person, the aged care worker or subject of allegation, the incident date, type and priority, and the response (police notified, medical treatment, supporters informed). ACQSC guidance, quick guides, SIRS statistics and blank forms are decoys. Structure modelled on au-ndis-reportable-incident, which covers the NDIS scheme; NDIS signals are excluded from this classifier's enforce tiers, but an aged care SIRS record can also reach 75 in the NDIS classifier because both share generic labels (provider, worker, date of incident).
Completed incident, injury, trauma and illness records kept by education and care services (long day care, kindergarten, family day care, outside school hours care), including council-run centres, under the Education and Care Services National Law and National Regulations (regulation 87, record; regulation 86, notification to parents; regulation 183, storage - regulation numbers as listed in ACECQA's Incident, injury, trauma and illness policy guidelines). A populated record names the child (name, date of birth or age), the date and time of the incident, the nature of the injury, trauma or illness, first aid or medication given, action taken and when the parent or guardian was notified. The records must be kept confidentially until the child turns 25. ACECQA guidance, service policies, the regulation text, blank forms and training scenarios are decoys. School incident reports are covered by au-qld-school-incident-report.
Detects Australian workplace drug and alcohol testing records - screening and confirmatory results under AS/NZS 4308 (urine) and AS/NZS 4760 (oral fluid), laboratory result phrasing (non-negative, cut-off concentrations in ng/mL), and breath/blood alcohol readings recorded in fitness-for-work programs.
Nationally Consistent Collection of Data on School Students with Disability (NCCD) records for a named student: disability category, level of adjustment and the evidence of adjustments provided.
Life support equipment registration records kept by Australian energy retailers and distributors under Part 7 of the National Energy Retail Rules (rules 123A-126A): completed medical confirmation forms, register entries and deregistration records that tie a premises (NMI, MIRN or supply address) to a customer and to life support equipment from the rule 3 list (oxygen concentrator, intermittent peritoneal dialysis machine, kidney dialysis machine, chronic positive airways pressure respirator, Crigler-Najjar syndrome phototherapy equipment, ventilator for life support, or other certified equipment). Applies in Queensland (Energex, Ergon Energy and retailers) since 1 July 2015.
Detects Healthcare Provider Identifier - Individual (HPI-I) patterns. The HPI-I is a 16-digit number starting with the prefix 800361. No checksum validation.
Detects Individual Healthcare Identifier (IHI) patterns. The IHI is a 16-digit number starting with the prefix 800360; the official format carries a Luhn check digit (not enforced here).
Populated medical certificates and fitness-for-work clearances held by employers: practitioner certificates given as evidence for personal / sick leave (Fair Work Act 2009 s 107(3) lets an employer require evidence that would satisfy a reasonable person), certificates of fitness or capacity issued outside a workers' compensation claim, fitness-for-duty assessments, pre-employment medical clearances and return-to-work clearances. The records name the employee or patient, state a practitioner's opinion that the person is unfit, or fit for normal, restricted or modified duties over a stated period, and often carry a diagnosis, work restrictions and the practitioner's name and provider or registration number. Boundary: workers' compensation claim records, Form 132M work capacity certificates and Comcare certificates of capacity belong to au-qld-workers-compensation-claim; statutory WHS health monitoring reports (Schedule 14 chemicals, lead, asbestos, audiometry) belong to au-whs-health-monitoring-record. Both are excluded from this classifier's enforce tiers.
Identifies Australian Medicare card numbers (10-11 digits, first digit 2-6). Filters same-digit sequences. Requires corroborative health-scheme keywords for reliable detection.
Detects Australian Medicare card numbers, which are issued to Australian citizens and permanent residents for access to subsidised healthcare under the Medicare system. The number consists of 10 digits: the first digit is between 2 and 6, followed by 8 additional digits and a single check digit. Numbers are commonly formatted as groups of 4-5-1 digits separated by spaces or hyphens.
Detects Medicare Provider Number patterns. An 8-character code consisting of 6 digits, a location character, and a check character. Validated by location and check character sets.
Detects NDIS Participant Number patterns. A 9-digit number starting with the prefix 43.
NDIS records for a named participant: access requests (Access Request Form, Supporting Evidence Form), NDIS plans and budgets (Core, Capacity Building, Capital supports), plan reassessments, service agreements, support coordination and plan management records.
Reportable incident notifications and investigation records for a named NDIS participant: death, serious injury, abuse or neglect, unlawful sexual or physical contact, sexual misconduct and unauthorised use of a restrictive practice (24-hour immediate notification and 5-business-day report).
Detects PBS Prescriber Number patterns. A 7-digit number whose check digit uses weights [0,5,8,4,2,1], mod 11 (checksum NOT enforced in this regex-only pattern; structural detection only).
Queensland senior secondary applications for access arrangements and reasonable adjustments (AARA), including illness and misadventure, for a named student: diagnosis, medical practitioner report, functional impact and the arrangement sought for internal or external assessment.
Completed registrations and entries in a Queensland council or Local Disaster Management Group vulnerable persons register (VPR), also called a special needs register or a register of persons requiring special assistance in a disaster or evacuation. A populated entry ties a named person and home address to disability, mobility or medical dependency (oxygen, dialysis, life sustaining equipment), a carer or emergency contact, and evacuation or transport needs. The Disaster Management Act 2003 does not create or name these registers. Councils keep them under the state framework "People with vulnerabilities in disasters: A framework for an effective local response" (2016) and their own local disaster management arrangements. Information acquired while performing a function under the Act is covered by the s 139 confidentiality offence. The Local Disaster Management Plan is public (s 60) but the register is not.
Completed notifications and internal records of a serious electrical incident or dangerous electrical event under the Electrical Safety Act 2002 (Qld). Serious electrical incident (s 11) covers a person killed by electricity or receiving a shock or injury treated by or under a doctor, or at high voltage. Dangerous electrical event (s 12) covers unsafe proximity to HV equipment, significant property damage caused by electricity, and unlicensed or unsafe electrical work. A business or undertaking must notify the regulator immediately (Electrical Safety Regulation 2013 s 265, with written notice within 48 hours if required and records kept 5 years). A distribution entity must give written notice in the approved form received within 24 hours (s 266). Section numbers are taken from the 27 Sep 2024 version of the Regulation; the current version could not be retrieved. Records name the injured or involved person, date, time and location, the equipment and voltage, the injury and treatment, and the notification to the Electrical Safety Office. The Act and Regulation, ESO safety alerts and prosecution summaries, toolbox talks and blank forms are decoys.
Completed enduring powers of attorney (Form 2 short form, Form 3 long form) and advance health directives (Form 4) under the Powers of Attorney Act 1998: principal and attorney details, financial and personal/health powers, life-sustaining treatment directions and capacity statements.
Detects QLD Health clinical handover documents containing patient status, medications, and treatment plans.
Detects Queensland public health medical records - patient files, clinical and health records, discharge summaries, progress notes and ieMR extracts - when the record phrase sits with populated patient identifiers (URN/MRN, name, DOB, Medicare) and clinical record fields.
Detects completed Queensland patient consent records - informed, treatment, surgical and anaesthetic consent forms, advance health directives and enduring power of attorney (health) documents - when the consent phrase sits with populated patient identifiers and consent form fields.
Detects Queensland mental health assessment and involuntary treatment records - psychiatric assessments and evaluations, mental state examinations, examination and treatment authorities, forensic orders, recommendations for assessment and Mental Health Review Tribunal matters - when the phrase sits with populated patient identifiers and assessment fields.
Detects Queensland notifiable condition reports - notifiable condition or disease notifications, communicable disease reports and public health notifications made under the Public Health Act 2005 (Qld) - when the phrase sits with populated case identifiers and notification fields.
Records of a pool immersion incident involving a young child (under 5) in Queensland under the Building Act 1975: the hospital notice to the chief executive (health) under s 245G (name and date of birth of the young child, day of the examination, address of the child's parents, address where the incident happened), the onward notice to QBCC, the local government and the Family and Child Commissioner under s 245I, and the council's follow-up pool inspection under s 246ADA, together with council drowning and near-drowning incident files. Pool immersion information may be disclosed only as allowed by s 257A. Public pool safety certificate and regulated pools register entries, pool fencing guidance, the statute text and drowning statistics are decoys.
QCAT applications and orders appointing or reviewing guardians and administrators for adults with impaired decision-making capacity (Form 10), interim orders and supporting health-professional reports.
Queensland council animal management enforcement records under the Animal Management (Cats and Dogs) Act 2008. Covers proposed declaration notices (s 90: breed, colour, sex, distinguishing marks, reasons, written representations within at least 14 days), regulated dog declarations (s 89 and s 94: declared dangerous or declared menacing dog), information notices (s 95), destruction orders (s 127A) and dog attack investigation or complaint records (attack offences ss 194-195). These records name the owner, the dog, the address and, for attacks, the victim and their injuries. The state regulated dog register may be inspected only by officers, owners and similar persons (s 173). The council dog registry is open to inspection, but owner information is excluded (s 179(2)), so a registry extract without owner details is not matched at enforce tiers. Restricted dog provisions survive only as transitional permits after the 2024 amendments (Act No. 17 of 2024), which introduced prohibited dogs (s 127).
Positive behaviour support plans, restrictive practice approvals and authorisations for a named adult with disability: containment, seclusion, chemical, mechanical and physical restraint and restricted access to objects; short-term approvals by the Office of the Public Guardian and QCAT approvals under the Disability Services Act 2006 Part 6.
Detects special education and special needs learning plans for a named student - personalised learning plans, individual curriculum/education/support plans, Education Adjustment Program profiles and student support plans with disability, adjustment and goal details - when the plan phrase sits with populated student identifiers and plan fields.
Detects completed Queensland student enrolment forms and applications - student, school or prep enrolment forms, applications for enrolment and SEF-1 records with child and family details - when the phrase sits with populated student identifiers and enrolment fields.
Register entries and customer records kept by Queensland water service providers and councils for "special needs" customers and properties whose occupants need a continued, uninterrupted and unrestricted water supply for life support or other medical needs, most often home haemodialysis. The basis is customer-charter and code practice, not a statutory register: the Water Supply (Safety and Reliability) Act 2008 contains no special-needs or dialysis provision; the SEQ Customer Water and Wastewater Code covers "customers and tenants with special needs for an uninterrupted supply of water" (clause wording not retrieved); and the Urban Utilities Residential Customer Charter defines a special needs residential property as one where an occupant needs such supply as confirmed by a registered medical specialist, treating hospital or dialysis centre, and commits to at least four business days' notice of planned interruptions to those properties. Modelled on au-energy-life-support-register. Charters, glossaries and eligibility pages are decoys.
QTAC Educational Access Scheme applications and personal statements for a named applicant: disadvantage categories (personal illness or disability, English language difficulty, home environment and responsibilities, school environment, financial hardship) with supporting evidence.
Tertiary student disability access and adjustment plans for a named student: condition or diagnosis and the academic adjustments granted. Plan names vary by institution (UQ Student Access Plan, QUT Access Equity Plan, UniSC and Bond Learning Access Plan, CQU Accessibility Plan, UniSQ Learning Support Plan, JCU AccessAbility Services Access Plan).
Applications for special consideration, assessment extensions, deferred or supplementary examinations for a named student, usually with medical, bereavement or personal-circumstance evidence.
Detects Canada Health Service Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the generic numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Ontario Health Insurance Plan (OHIP) numbers: 10 digits often grouped 4-3-3 with a two-letter version code.
Detects Canada Personal Health Identification Number (PHIN) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the generic numeric format, corroborative evidence keywords are essential for reliable detection.
Detects child safety investigation case files containing child identifiers, harm notifications, investigation outcomes, child protection orders, and out-of-home care placements under the Child Protection Act 1999 (Qld). These files contain highly sensitive information about vulnerable children including substantiated abuse details — unauthorised disclosure endangers child safety and compromises ongoing investigations.
Detects published coronial findings and recommendations under the Coroners Act 2003 (Qld). Although coronial findings are public documents, they contain sensitive details about the circumstances and cause of death, manner of death, and identity of deceased persons. Government agencies handling these documents should classify them as SENSITIVE Legal due to the distressing nature of the content.
Detects donor conception records including donor identity information, recipient details, offspring matching, and assisted reproductive technology treatment records under the Status of Children Act 1978 (Qld). These records contain the most sensitive reproductive information — donor identities, recipient medical details, and biological parentage links. Unauthorised disclosure can permanently alter family relationships and breach legal confidentiality protections.
Detects documents containing drug trafficking investigation intelligence including targets, supply chain mapping, precursor chemical tracking, clandestine laboratory intelligence, and cross-border interdiction plans. QPS Drug and Serious Crime Group is the primary unit. Disclosure enables traffickers to destroy evidence, alter supply routes, and eliminate informants.
Detects EU declarations of conformity for high-risk AI systems under Article 47 and Annex V of the EU AI Act (Regulation (EU) 2024/1689). By drawing up the declaration the provider assumes responsibility for compliance; pre-signature drafts and the surrounding conformity-assessment correspondence reveal the provider's compliance posture, notified-body findings, and certificate details before market placement.
Detects deployer-side fundamental rights impact assessments (FRIA) under Article 27 of the EU AI Act (Regulation (EU) 2024/1689). A FRIA is performed before deploying certain high-risk AI systems by public bodies, private providers of public services, and deployers of credit-scoring and life/health-insurance pricing systems (Annex III points 5(b) and (c)). Completed FRIAs contain candid assessments of risks of harm to specific categories of natural persons and are sensitive before notification and remediation.
Detects general-purpose AI (GPAI) model provider documentation under Article 53 of the EU AI Act (Regulation (EU) 2024/1689): Annex XI technical documentation for the AI Office, Annex XII information packs for downstream providers, the Article 53(1)(d) public summary of training content, and Article 55 systemic-risk evaluation material (adversarial testing / red-teaming reports). Pre-publication drafts reveal model internals, training-data provenance, compute and energy figures, and systemic-risk findings.
Detects Article 11 / Annex IV technical documentation for high-risk AI systems under the EU AI Act (Regulation (EU) 2024/1689). This documentation must demonstrate compliance of the high-risk AI system before placing on the market and contains commercially sensitive material — system architecture, design specifications, training-data datasheets, risk management findings, and known limitations — whose uncontrolled disclosure exposes trade secrets and the provider's compliance posture.
Detects extracts and working copies of the DORA Article 28(3) register of information on contractual arrangements with ICT third-party service providers, including the ESAs' Implementing Regulation (EU) 2024/2956 template content (contractual arrangement reference numbers, provider LEIs, ICT service supply chain, critical or important function flags). The register maps a financial entity's entire ICT outsourcing estate and its concentration risk; disclosure exposes supplier dependencies and attack surface.
Detects EU VAT identification numbers for all 27 member states in a single consolidated pattern, built branch-by-branch from the per-country structures published in the European Commission VIES FAQ (Q11). Covers the Greek quirk (Greece prefixes with EL, not GR) and Northern Ireland's XI prefix, which remains checkable in VIES for goods traders under the Windsor Framework — XI is included with the UK 9-digit, 12-digit and GD/HA government/health-authority forms; plain GB numbers are NOT included because Great Britain left the VIES scheme after Brexit. This pattern is a superset alongside the existing per-country detectors (at/be/de/fr/hu/it-vat-number), which stay untouched for deployed-GUID stability — the same document may fire both, following the global-iban / eu-iban precedent.
Detects Finland European Health Insurance Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the generic numeric format, corroborative evidence keywords are essential for reliable detection.
Detects France Health Insurance Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the generic numeric format, corroborative evidence keywords are essential for reliable detection.
Detects medical records related to gender transition including hormone therapy prescriptions, surgical records, gender identity assessments, change of sex descriptor applications, and recognised sex certificates under Queensland law. These records reveal deeply personal information about gender identity that is subject to anti-discrimination protections — disclosure can cause severe harm including discrimination, harassment, and violence.
Detects documents containing genetic or genomic test results linked to identifiable patients, including pathogenic variant findings, hereditary risk assessments, and pharmacogenomic reports. Genetic data reveals predisposition to diseases, carrier status, and family lineage — disclosure enables genetic discrimination in insurance, employment, and relationships.
Detects Australian Health Practitioner Regulation Agency (AHPRA) registration numbers used to identify registered health practitioners across 16 professions.
Detects All Medical Terms And Conditions patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects Blood Test Terms patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects Brand Medication Names patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects Diseases patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects Department of Veterans' Affairs (DVA) file numbers used to identify Australian veterans and eligible dependants for health and support services.
Detects Generic Medication Names patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects HL7 Health Message patterns. Detects HL7v2 message headers and ADT event types
Detects ICD-10 Cm patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects ICD-10 Pcs patterns.
Detects International Classification of Diseases (ICD-9-CM) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the generic numeric format, corroborative evidence keywords are essential for reliable detection.
Detects person-linked Aboriginal and Torres Strait Islander data - Indigenous status and origin fields and Indigenous data, health data or identifiers attached to an identified person record - as well as discovery-grade Indigenous data governance references.
Detects a labelled health-insurance member, subscriber, policy or group identifier: a member/subscriber/policy/group ID label followed by a 6-15 character alphanumeric value that contains at least one digit. Insurance identifiers are protected health information under HIPAA and are frequently exposed in breach disclosures.
Detects Lab Test Terms patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects LOINC laboratory observation codes in nnnnn-n form.
Detects Lifestyles That Relate To Medical Conditions patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects Medical Specialties patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects National Metering Identifier (NMI) patterns used in the Australian energy market. A 10 or 11 digit number identifying electricity and gas connection points. Also covers the gas Meter Installation Registration Number (MIRN), which is allocated in the NMI number space: AEMO reserves the 5 XXX XXX XXX range for the gas industry (NSW/ACT 52, Vic 53, Qld 54, SA 55, WA 56, Tas 57) and MIRNs travel in the same aseXML NMI element with a checksum attribute. Context-dependent: requires energy/meter keywords.
Detects US National Drug Codes (NDC) identifying drug products, including common dashed labeler formats (4-4-2, 5-3-2, 5-4-2) and HIPAA 11-digit zero-padded forms. Structural NDC candidates used in pharmacy, claims, and clinical product coding.
Detects references to neural / neurotechnology data: brain-computer interface signals, EEG/EMG recordings, evoked potentials, neural decoding output and neurofeedback data. Colorado HB24-1058 and California SB 1223 both classify neural data as sensitive personal information. Topic-grade vocabulary detector, not a fixed-format detector.
Detects Okta API-token candidates, which begin with 00 and are followed by 40 base64url characters. Okta or SSWS context is required for enforcement because the 42-character shape can represent unrelated identifiers; the bare value shape surfaces only as discovery inventory. A leaked token grants Okta admin API access.
Detects references to reproductive and sexual-health data: pregnancy, abortion, contraception, fertility treatment, gender-affirming care and STI/HIV status. Washington's My Health My Data Act (and a wave of post-Dobbs state consumer-health-data laws) treat this as protected consumer health data. Topic-grade vocabulary detector.
Detects Surgical Procedures patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects HashiCorp Terraform Cloud / Terraform Enterprise API tokens (atlasv1 format). These tokens authenticate to the Terraform Cloud API and can read/write workspace state and variables; a leak can expose all infrastructure secrets.
Identifies treatment plan details references in healthcare and patient records. Protected health information under applicable data protection regulations.
Identifies patient medication histories - medication history, drug or prescription history, current medication lists, dispensing records and medication reconciliation - when the phrase sits with populated patient identifiers and medication lines (drug, dose and frequency). Protected health information under applicable data protection regulations.
Identifies patient pathology and laboratory result records - blood test and clinical chemistry results, laboratory reports, and histopathology, cytology or biopsy reports - by combining a pathology/laboratory report phrase with populated record structure (labelled patient identifiers, specimen fields, result lines with units and a reference range or H/L flag, and a reporting pathologist). Protected health information under applicable data protection regulations. The slug predates the merge of the former pathology reports classifier and is kept for stability.
Identifies diagnostic imaging data references in healthcare and patient records. Protected health information under applicable data protection regulations.
Identifies clinician consultation notes references in healthcare and patient records. Protected health information under applicable data protection regulations.
Identifies substance use treatment records references in healthcare and patient records. Protected health information under applicable data protection regulations.
Identifies hiv status data references in healthcare and patient records. Protected health information under applicable data protection regulations.
Identifies individual immunisation / vaccination records - immunisation history statements, vaccination records and certificates, register extracts and vaccine administration entries - when the phrase sits with populated patient identifiers and vaccine administration fields. Health information under applicable data protection regulations.
Identifies genomic testing results references in healthcare and patient records. Protected health information under applicable data protection regulations.
Identifies patient prior-authorisation / pre-approval records - authorisation requests, coverage determinations and utilisation or medical-necessity reviews for a named patient - when the phrase sits with populated patient identifiers and authorisation fields. Health and insurance information under applicable data protection regulations.
Identifies hospital billing records references in healthcare and patient records. Protected health information under applicable data protection regulations.
Identifies healthcare provider identifier records - practitioner lists, credentialing files and directory extracts that carry labelled provider identifiers (Medicare provider number, prescriber number, HPI-I/HPI-O, Ahpra registration number, NPI, licence number) alongside practitioner and practice details. Format validation of each identifier is left to the dedicated identifier classifiers.
Identifies clinical trial participant data references in healthcare and patient records. Protected health information under applicable data protection regulations.
Identifies adverse event reports references in healthcare and patient records. Protected health information under applicable data protection regulations.
Identifies informed consent forms references in healthcare and patient records. Protected health information under applicable data protection regulations.
Detects Types Of Medication patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects Unified Payments Interface (UPI) Virtual Payment Addresses (VPA / UPI ID) used in India. Format is a local part and a payment-service provider handle separated by @ (for example name@oksbi or business@ybl). Handles are alphabetic PSP codes; local parts allow letters, digits, dot, underscore and hyphen.
Detects the New Zealand Government IN-CONFIDENCE protective marking under the Protective Security Requirements (PSR) classification system: endorsed forms (e.g. MEDICAL IN-CONFIDENCE, BUDGET: IN-CONFIDENCE), the legacy SEEMail bracket trigger-word convention ([IN-CONFIDENCE]), and the bare ALL-CAPS document-banner form. Regex logic verified against the official PSR Classification Handbook (protectivesecurity.govt.nz) and Cabinet Office Circular CO(08)1; matched case-sensitively.
Detects New Zealand Ministry of Health Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the generic numeric format, corroborative evidence keywords are essential for reliable detection.
Detects New Zealand Social Welfare Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the generic numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Philippines PhilHealth Identification Numbers (PIN) in the common dashed format ##-#########-# (12 digits). Used for national health insurance membership and claims.
Detects prosecution briefs prepared by Queensland regulatory bodies (Workplace Health and Safety, Environmental Protection Authority, Office of Fair Trading) for enforcement action. Disclosure compromises prosecution integrity and alerts enforcement targets.
Detects sexual assault counselling records and the legal material that seeks or protects them, for an identified person: counselling session notes, trauma counselling and victim/survivor support records, forensic medical examination referrals, specialist sexual assault service records (Queensland SARAS, Centres Against Sexual Assault, Yarrow Place, Sexual Assault Resource Centre, sexual assault response teams), and subpoena or privilege material about protected counselling communications — Qld sexual assault counselling privilege (Evidence Act 1977 Pt 2 Div 2A), NSW sexual assault communications privilege (Criminal Procedure Act 1986 ss295-306), Vic confidential communications (Evidence (Miscellaneous Provisions) Act 1958 Div 2A), and WA, SA, Tas, ACT and NT equivalents. These records are subject to strong statutory privilege and carry the highest privacy protections — disclosure can re-traumatise survivors, compromise criminal proceedings, and endanger safety.
Detects surrogacy arrangement records including parentage orders, surrogacy agreements, birth mother medical records, and intended parent assessments under the Surrogacy Act 2010 (Qld). These records contain deeply personal information about reproductive choices, medical procedures, and legal parentage transfers — disclosure can cause severe emotional distress and breach court-sealed parentage orders.
Detects Scottish Community Health Index (CHI) 10-digit patient identifiers used by NHS Scotland.
Detects NHS Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects United Kingdom (and Northern Ireland XI) Value Added Tax registration numbers. Standard trader numbers are GB followed by 9 digits; branch traders use GB plus 12 digits; government departments use GBGD### and health authorities GBHA###. Northern Ireland post-Brexit issues XI-prefixed numbers with the same body formats. Matching is uppercase letter prefixes as issued by HMRC.
Detects DEA patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Impairments Listed In The U.S. Disability Evaluation Under Social Security patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that identifies health and medical terminology in documents. Keyword matching is used to flag content containing medical language.
Detects labelled U.S. Medicaid member or recipient identification numbers. Medicaid ID formats are not standardised nationally — they vary by state in length and composition (typically 8-12 alphanumeric characters) — so this pattern anchors on an explicit Medicaid/recipient context label immediately preceding the ID rather than on a fixed structure.
'Detects MBI patterns. Excluded letters: S, L, O, I, B, Z.' This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects US National Provider Identifier (NPI) values structurally: a ten-digit number beginning with 1 or 2. Detection is structural only — the NPI Luhn checksum (80840 prefix) is NOT enforced. Confidence comes from healthcare context tiers (NPI-specific terms at 85, broader provider/claims context at 75, bare shape discovery-only at 65), and an all-same-digit guard rejects repeated-digit values such as 1111111111.