Isikukood
Detects Isikukood patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
- Type
- regex
- Engine
- universal
- Confidence
- high
- Confidence justification
- High confidence: pattern has strong structural constraints (specific format, prefix, or character class restrictions) that significantly reduce false positive rates.
- Detection quality
- Verified
- Jurisdictions
- eu, ee
- Regulations
- BDSG, CNIL / LIL, GDPR
- Frameworks
- ISO 27001, ISO 27701
- Data categories
- pii, government-id
- Scope
- narrow
- Risk rating
- 5
- Platform compatibility
- Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Compatible, Netskope: Compatible
Pattern
\b[1-6]\d{2}[01]\d[0-3]\d\d{4}\bCorroborative evidence keywords
isikukood, personal identification code, personal ID, ID number, identification, ID card, license, permit, registration, certificate
Proximity: 300 characters
Should match
37501011234— Estonian ID (male, born 1975-01-01)48812125678— Estonian ID (female, born 1988-12-12)39203034567— Estonian ID (male, born 1992-03-03)
Should not match
77501011234— Invalid century/gender digit (7)3750101123— Only 10 digits instead of required 11
Known false positives
- The embedded date validation and gender/century first digit provide strong structural constraints. Mitigation: The structured format with date and gender encoding significantly reduces false positives. Keyword context provides additional confidence.
- In multiple languages, similar terminology used in formal or administrative contexts (education, professional documentation) that does not constitute sensitive data collection. Mitigation: Layer with additional contextual signals such as structured identifiers, form fields, or database column headers to distinguish sensitive records from general references.