Employee withholding elections

Detects references to employee withholding elections in financial and compliance documents. Commonly found in Australian regulatory filings, transaction records, and audit documentation.

Type

regex

Engine

boost_regex

Confidence

medium

Confidence justification

identifier/document-structure anchored regex with constrained context replaces phrase-only detection.

Detection quality

Mixed

Jurisdictions

au

Regulations

AML/CTF Act (Cth), IPA 2009 (Qld), NDB Scheme (Cth), Privacy Act 1988 (Cth), SOCI Act 2018 (Cth)

Frameworks

ISO 27001, ISO 27701, PCI-DSS, SOC 2

Data categories

financial

Scope

wide

Platform compatibility

Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported

Pattern

(?is)\b(?:employee\s+withholding\s+elections|tax\s+declaration|PAYG\s+withholding|TFN\s+declaration|salary\s+sacrifice|pre[\s-]+tax\s+deduction|voluntary\s+withholding|withholding\s+variation|tax\s+offset|employee\s+election|payroll\s+deduction)\b

Corroborative evidence keywords

employee withholding elections, employee, withholding, elections, payroll, tax, operations, benefits, termination, hire date, salary, compensation, 401k, W-2, I-9, superannuation, police check, working with children check, WWCC, Blue Card (+56 more)

Proximity: 300 characters

Should match

• employee withholding elections — Primary topic phrase match
• tax declaration — Case-insensitive topic phrase match
• PAYG withholding — Alternative topic phrase match
• TFN declaration — Additional topic phrase match

Should not match

• unrelated generic text without domain phrases — No relevant topic phrases present
• placeholder value 12345 — Random text should not match topic-specific regex
• payroll reimbursement — Generic word pair from old broad template should not match

Known false positives

• Financial terminology appearing in published reports, accounting textbooks, regulatory guidance, or template documents without actual transaction data. Mitigation: Require corroborative evidence keywords within the proximity window. Cross-reference with structured financial identifiers to confirm actual sensitive data.
• In Australian English, standard business terminology overlapping with financial detection keywords in routine correspondence and documentation. Mitigation: Increase confidence threshold when scanning business correspondence. Layer with transaction-specific patterns for higher precision.