Off-cycle payroll approvals

Detects off-cycle and ad hoc payroll payment requests and approvals for an identified employee: off-cycle pay requests, manual/special pay runs, final pay and termination pay calculations, with payment amounts or payment date.

Type
regex
Engine
boost_regex
Confidence
medium
Confidence justification
Medium: the primary phrases also appear in policies, guidance, blank forms and news, so enforce tiers require a populated field with a non-placeholder value and 85 adds a record-specific populated detail plus independent corroboration. Person and record values are customer-defined, so the field regexes use labelled loose values with a placeholder guard. 85/75 are heuristic evidence tiers, not measured accuracy.
Detection quality
Topic false positive
Jurisdictions
au, global
Regulations
Fair Work Act 2009 (Cth), Fair Work Regulations 2009 (Cth), Industrial Relations Act 2016 (Qld), Privacy Act 1988 (Cth), Information Privacy Act 2009 (Qld)
Frameworks
ISO 27001, ISO 27701
Data categories
financial, employment, pii
Scope
wide
Risk rating
4
Platform compatibility
Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported

Pattern

(?i)\b(?:off[\s-]cycle\s+(?:pay(?:ments?|roll)?|pay\s+runs?)(?:\s+(?:requests?|approvals?|forms?))?|ad[\s-]hoc\s+(?:payments?|pay\s+runs?)\s+(?:requests?|approvals?)|manual\s+(?:payments?|cheques?|pay\s+runs?)\s+(?:requests?|approvals?)|special\s+pay\s+runs?|supplementary\s+(?:payments?|pay\s+runs?)|urgent\s+payment\s+requests?|final\s+pay\s+(?:calculations?|requests?|approvals?)|termination\s+pay(?:ments?)?\s+(?:calculations?|approvals?|requests?))\b

Corroborative evidence keywords

approved, approver, authorised, delegate, reason, termination, urgent, final pay

Proximity: 300 characters

Should match

Should not match

Known false positives

References