U.S. Social Security Number (Microsoft built-in)
Catalogue reference for the Microsoft Purview built-in U.S. Social Security Number (SSN) sensitive information type, which detects a nine-digit US Social Security Number in formatted, unformatted or randomized form, with SSN keywords. Microsoft recommends medium confidence (75) for the built-in entity. This YAML-only record lets a package recipe include the Microsoft entity explicitly; it does not reproduce Microsoft's built-in regular expressions, keyword dictionaries, checksums or XML.
- Type
- keyword_list
- Confidence
- medium
- Confidence justification
- Medium confidence for this YAML-only record: its keyword logic finds references to the built-in entity name with Microsoft Purview context, not populated values. Microsoft's own recommended confidence for the entity is 75. The record does not claim to reproduce Microsoft's proprietary detection logic.
- Jurisdictions
- us
- Regulations
- CCPA/CPRA, GLBA, HIPAA, SOX
- Frameworks
- ISO 27001, ISO 27701, PCI-DSS
- Data categories
- pii, phi, government-id
- Scope
- specific
- Risk rating
- 5
Should match
U.S. Social Security Number (SSN) built-in SIT— Microsoft built-in entity nameUS Social Security Number catalogue reference— Name variant used for registry discoveryDLP policy inventory - Microsoft Purview Rule: Builtin-us-social-security-number-builtin Condition: U.S. Social Security Number (SSN) (built-in entity a44669fe-0d48-453d-a9b1-2cc83f2cba77), medium confidence, instance count 1 or more Action: notify sender— DLP rule inventory row naming the built-in entity with Microsoft Purview context
Should not match
SSN: 078-05-1120— Populated value or sibling reference without the built-in entity nameUS Individual Taxpayer register— Populated value or sibling reference without the built-in entity nameBenefits enrolment guidance— Populated value or sibling reference without the built-in entity name
Known false positives
- Documentation and policy inventories can mention the Microsoft built-in entity by name. Mitigation: Treat this YAML-only record as catalogue discovery; enable the Microsoft entity for value detection.
- The custom SIT us-social-security-number detects the same data; deploying both doubles matches on the same content. Mitigation: Pick one per package. The custom SIT is the default; include this built-in only by an explicit recipe decision.