Individual Healthcare Identifier

Detects Individual Healthcare Identifier (IHI) patterns. The IHI is a 16-digit number starting with the prefix 800360, validated with the Luhn algorithm.

Type: regex
Engine: universal
Confidence: medium
Confidence justification: Medium confidence: the 800360 prefix provides strong structural specificity for a 16-digit identifier. Corroborative keywords are recommended to distinguish from other long numeric sequences but the prefix already significantly reduces false positives.
Detection quality: Partial
Jurisdictions: au
Regulations: AML/CTF Act (Cth), IPA 2009 (Qld), NDB Scheme (Cth), Privacy Act 1988 (Cth)
Frameworks: ISO 27001
Data categories: pii, government-id
Scope: narrow
Risk rating: 9
Platform compatibility: Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Compatible, Netskope: Compatible

Pattern

\b800360\d{10}\b

Corroborative evidence keywords

IHI, Individual Healthcare Identifier, healthcare identifier, HPI, HPI-I, HPI-O, provider identifier, AHPRA, registration number, prescriber number, PBS prescriber, pharmaceutical benefits, Medicare provider, provider number, MRN, medical record number, patient ID, NPI, DEA, medicare (+4 more)

Proximity: 300 characters

Should match

8003600000000001 — IHI with standard 800360 prefix
8003601234567890 — IHI with typical digit sequence
8003609999999999 — IHI upper range

Should not match

8003610000000001 — Wrong prefix (800361 instead of 800360)
800360000000001 — Too few trailing digits (9 instead of 10)
80036000000000020 — Too many trailing digits (11 instead of 10)

Known false positives

Long numeric sequences in unrelated contexts (tracking numbers, serial codes) matching the Individual Healthcare Identifier format Mitigation: Use corroborative keywords and, where available, checksum validation to filter false matches.