Mar 09 2019
12:45 AM
- last edited on
Feb 01 2023
10:00 AM
by
TechCommunityAP
Mar 09 2019
12:45 AM
- last edited on
Feb 01 2023
10:00 AM
by
TechCommunityAP
Hi,
Using ediscovery searching for "Denmark Personal Identification Number" in exchange on all mailboxes, my search result only shows false results. No result contains itens with "Denmark Personal Identification Number".
I am using the following search string:
SensitiveType:"Denmark Personal Identification Number|*|70.."
What am i doing wrong?
/Robert
Mar 09 2019 11:38 AM
If I remember correctly and unless something has changed recently, the SensitiveType keyword is only available for searches against SPO, not Exchange. Here's the UserVoice item on this that has been opened for years now: https://office365.uservoice.com/forums/273493-office-365-admin/suggestions/15824158-enable-sensitive...
@Tony Redmond should be better informed on this subject.
Mar 09 2019 12:16 PM
Looks like Denmark Personal Id number is supported by Exchange: https://docs.microsoft.com/en-us/exchange/policy-and-compliance/data-loss-prevention/sensitive-infor...
Maybe you should open a support ticket?
Mar 10 2019 12:03 PM
Supported as a sensitive type in DLP, yes. However, is the SensitiveType keyword supported at all for eDiscovery against Exchange?
Mar 10 2019 12:06 PM
That's a good question. However, you could start from the position that when a sensitive data type is supported for DLP by Exchange, it should be supported elsewhere because the intention is that's the way the data governance framework works... so I think it's worth a support call.
Mar 10 2019 12:09 PM
That was my expectation as well, however a test search I run returned pretty much every exchange item, which is similar to what Robert has reported above about incorrect results. So I figured I'd involve you as well :)
Mar 11 2019 01:56 AM
I think Vasil Michev is right, it is not supported against Exchange, when searhing.
I will dig into this further.
Mar 11 2019 04:54 AM
It is not supported:
while you can’t currently use Content Search to find personal data at rest in Exchange Online mailboxes, you can use the sensitive information types you curate for GDPR to find and protect personal information as it is sent through email.
https://docs.microsoft.com/en-us/office365/securitycompliance/search-for-and-find-personal-data
Mar 11 2019 05:08 AM
Pretty clear:
Finding personal data subject to GDPR relies on using sensitive information types in Office 365. These define how the automated process recognizes specific information types such as health service numbers and credit card numbers. At this time these cannot be used to find data in Exchange mailboxes at rest. However, sensitive information types can be used with data loss prevention policies to find personal data in mail while in transit.
Always good to read the documentation! Thanks for finding it.
Mar 11 2019 10:01 AM
I should have read my own material. This topic is covered in Chapter 20 of Office 365 for IT Pros...
Mar 11 2019 11:01 AM
Well I did scan the documentation on Content search, it doesn't explicitly mention that the SensitiveType keyword is not supported. I'll just open an issue for the documentation team to update the docs...