Sensitive Data

You'll want to create a custom sensitive information type under Purview's Data Classification and use a REGEX as a primary pattern; then, include this SIT into a DLP policy. If you want an example of a REGEX for Credit Card numbers, you can just search for them online. 🙂 ALSO, you could copy the existing credit card SIT definition from the same Data Classification SIT list and then edit the copied SIT to exclude the keyword requirement.