Individual Healthcare Identifier

Detects Individual Healthcare Identifier (IHI) patterns. The IHI is a 16-digit number starting with the prefix 800360; the official format carries a Luhn check digit (not enforced here).

Type: regex
Engine: universal
Confidence: medium
Confidence justification: Medium confidence: the 800360 prefix provides strong structural specificity for a 16-digit identifier. Corroborative keywords are recommended to distinguish from other long numeric sequences but the prefix already significantly reduces false positives.
Detection quality: Verified
Jurisdictions: au
Regulations: AML/CTF Act (Cth), IPA 2009 (Qld), NDB Scheme (Cth), Privacy Act 1988 (Cth)
Frameworks: ISO 27001
Data categories: pii, government-id
Scope: narrow
Risk rating: 5
Platform compatibility: Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Compatible, Netskope: Compatible

Pattern

\b800360\d{10}\b

Corroborative evidence keywords

IHI, Individual Healthcare Identifier, healthcare identifier, [object Object], [object Object], HPI-I, HPI-O, provider identifier, AHPRA, registration number, prescriber number, PBS prescriber, pharmaceutical benefits, Medicare provider, provider number, [object Object], medical record number, patient ID, [object Object], [object Object] (+5 more)

Proximity: 500 characters

Should match

8003600000000001 — Exact 65 discovery probe with standard 800360 prefix and no context
8003601234567890 — IHI with typical digit sequence
8003609999999999 — IHI upper range
Patient identifier 8003601234567890 in the clinical record — Exact 75 probe with clinical context but no explicit IHI label
Patient IHI 8003601234567890 in the clinical record — Exact 85 probe with explicit IHI terminology and clinical context

Should not match

8003610000000001 — Wrong prefix (800361 instead of 800360)
800360000000001 — Too few trailing digits (9 instead of 10)
80036000000000020 — Too many trailing digits (11 instead of 10)
Invoice tracking number 8003601234567890 — Valid-shaped non-health number must remain discovery-only

Known false positives

Long numeric sequences in unrelated contexts (tracking numbers, serial codes) matching the Individual Healthcare Identifier format Mitigation: Use corroborative keywords and, where available, checksum validation to filter false matches.