U.S. Individual Taxpayer Identification Number (Microsoft built-in)
Catalogue reference for the Microsoft Purview built-in U.S. Individual Taxpayer Identification Number (ITIN) sensitive information type, which detects a nine-digit US Individual Taxpayer Identification Number beginning with 9, with ITIN keywords. Microsoft recommends medium confidence (75) for the built-in entity. This YAML-only record lets a package recipe include the Microsoft entity explicitly; it does not reproduce Microsoft's built-in regular expressions, keyword dictionaries, checksums or XML.
- Type
- keyword_list
- Confidence
- medium
- Confidence justification
- Medium confidence for this YAML-only record: its keyword logic finds references to the built-in entity name with Microsoft Purview context, not populated values. Microsoft's own recommended confidence for the entity is 75. The record does not claim to reproduce Microsoft's proprietary detection logic.
- Jurisdictions
- us
- Regulations
- CCPA/CPRA, FTC Act, GLBA, HIPAA, SOX, State Breach Laws (US)
- Frameworks
- ISO 27001, ISO 27701, PCI-DSS, SOC 2
- Data categories
- pii, financial, government-id
- Scope
- specific
- Risk rating
- 5
Should match
U.S. Individual Taxpayer Identification Number (ITIN) built-in SIT— Microsoft built-in entity nameUS Individual Taxpayer Identification Number catalogue reference— Name variant used for registry discoveryDLP policy inventory - Microsoft Purview Rule: Builtin-us-individual-taxpayer-id-builtin Condition: U.S. Individual Taxpayer Identification Number (ITIN) (built-in entity e55e2a32-f92d-4985-a35d-a0b269eb687b), medium confidence, instance count 1 or more Action: notify sender— DLP rule inventory row naming the built-in entity with Microsoft Purview context
Should not match
ITIN: 912-70-1234— Populated value or sibling reference without the built-in entity nameUS Social Security Number register— Populated value or sibling reference without the built-in entity nameW-7 application guidance— Populated value or sibling reference without the built-in entity name
Known false positives
- Documentation and policy inventories can mention the Microsoft built-in entity by name. Mitigation: Treat this YAML-only record as catalogue discovery; enable the Microsoft entity for value detection.
- The custom SIT us-individual-taxpayer-id detects the same data; deploying both doubles matches on the same content. Mitigation: Pick one per package. The custom SIT is the default; include this built-in only by an explicit recipe decision.