Search

MC256841 – (Updated) Updates to U.S. Social Security Number sensitive information type definition for improved accuracy (archived)

Information Protection

check before: 2021-05-31

Product:

Information Protection, Information Protection - Office 365, Microsoft 365 Apps, Microsoft 365 suite, Purview Information Protection

Platform:

World tenant, Online

Status:

Change type:

Admin impact, Updated message, User impact

Links:

Details:

Updated July 19, 2021: We have made the decision to make additional changes before we proceed with the rollout. To ensure that the your policies continue to behave as they do today without impacting the accuracy, we are delaying this release until we work on the necessary changes. We will send out another communication with the next updates. Thank you for your patience.

To improve the accuracy of the "U.S. Social Security Number" (SSN) sensitive information type, we are making the following changes to its definition:
1. Three discreet confidence levels (High, Medium, and Low) depending on the level of accuracy. The three levels indicate the likelihood of a true positive considering the following:
When the SSN was issued. SSNs issued pre-2011 had relatively strong definition due to additional checks.
Whether the SSN are formatted (ddd dd dddd or ddd-dd-dddd) or unformatted (ddddddddd).
Whether a keyword is found in proximity to the SSN.
2. An additional pattern which does not require mandatory keywords in proximity to reduce false negatives. The current definition requires keywords like "SSN" or "Social Security Number" in proximity to the actual number, which can sometimes lead to valid numbers not being detected (i.e. in an Excel spreadsheet where the supporting keyword is present only in the header row).
3. Added intelligence to detect high volume SSNs in tabular data, like an Excel spreadsheet where keyword is present only in the header of the table. Use "High confidence" or "Medium confidence" in your policy for this. Please note that this requires at least one instance to be detected with a keyword in proximity.
See details of current definition vs. new definition below.
[When this will happen]
We will communicate via Message center when we are ready to proceed.

Change Category:
XXXXXXX ...

Scope:
XXXXXXX ...

Release Phase:

Created:
2021-05-18

updated:
2021-07-20

the free basic plan is required to see all details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.


Last updated 12 months ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!