Microsoft Information Protection: Updates to Sensitive Information Types (SITs) definitions

Originally posted by Microsoft Apr 11, 2022 Microsoft 365 suite 0 Comments

In our continued efforts to improve the accuracy of out-of-the-box sensitive information types (SITs), we will be updating the definition of five existing SITs for better accuracy and to stay updated with the latest definition published by relevant authorities.

When this will happen:

Rollout will begin in mid-April and is expected to be complete by end of April.

How this will affect your organization:

The following SITs definitions are being updated as follows:

SIT name	Changes
Slovakia passport number	The new definition will look for: Existing pattern – One letter followed by 7 digits Additional pattern – Two letters followed by 6/7 digits
U.S. driver’s license number	Added a case insensitive keyword “DLN” to the low confidence pattern
Hong Kong identity card (HKID) number	Added support for following additional pattern: Optional space before check digit
Singapore national registration identity card (NRIC) number	Added support for the following additional pattern(s): ‘M’ as the first letter Reference: National Registration Identity Card – Wikipedia
Drug Enforcement Agency (DEA) number	Updated the definition as per the latest patterns issued by Drug Enforcement Administration Reference: DEA number – Wikipedia

What you need to do to prepare:

No action is needed. Your existing policies (including DLP policies) need not be changed.

Learn more:

• Sensitive information type entity definitions

Message ID: MC355212