MC522570, Microsoft 365 Suite, Microsoft 365 Experts
From Microsoft Corporation
Technical Bulletin MC522570 · Published Mar 2, 2023
Message Summary
In our continued efforts to be in line with latest published definitions, and to improve the accuracy of out-of-the box sensitive information types (SIT), we have updated the definition of 4 existing SITs.
When this will happen:
Rollout will begin in late February and is expected to be complete by mid-May – see table below for expected timing on each SIT update.
How this will affect your organization:
These improvements will roll out to the following existing SITs:
| SIT name | Changes | Commercial cloud availability | Government cloud availability |
| France CNI | Existing definition: – Twelve digitsAdditional patterns we will look for: – Nine characters (Mix of letters and digits) – Twelve characters (Mix of letters and digits) Reference |
End of February | End of March |
| U.S. ITIN | Existing Definition (Nine digits): – the digit “9” – two digits – a space or dash (optional) – a “7” or “8” – a digit – a pace, or dash (optional) – four digitsNew Definition (Nine digits): – the digit “9” – two digits – a space or dash (optional) – two digits “50” to “65”, “70” to “88”, “90” to “92” and “94” to “99” for the fourth and fifth digits – a space, or dash (optional) – four digits Reference |
End of February | End of March |
| South Korea RRN | Existing Definition (Thirteen digits): – six digits indicating valid date of birth YYMMDD – a hyphen – one digit determined by the century and gender – four-digit region-of-birth code – one digit used to differentiate people for whom the preceding numbers are identical – a check digitNew pattern (Thirteen digits without checksum): – six digits indicating valid date of birth YYMMDD – a hyphen – seven digits Reference |
Mid-April | Mid-May |
| Indonesia KTP | Existing Definition (Sixteen digits): – Two-digit province code – A period (optional) – Two-digit regency or city code – Two-digit subdistrict code – A period (optional) – Six digits indicating date of birth on the format DDMMYY – A period (optional) – Four digitsNew pattern (Sixteen digits): – Two digits indicating province code. – Four digits – Six digits indicating date of birth on the format DDMMYY. – Four digits |
Mid-April | Mid-May |
What you need to do to prepare:
No action is required to prepare for this update. Your existing policies (including DLP policies) need not be changed; you may wish to update internal documentation as appropriate.
Get started with sensitive information types in the Microsoft Purview compliance portal:
- Microsoft Purview compliance portal for WW and GCC cloud environments
- Microsoft Purview compliance portal for GCC-High cloud environments
- Microsoft Purview compliance portal for DoD cloud environments
Learn more: Sensitive information type entity definitions
