We have implanted DLP policies and straight away we have had a huge number of false positives specifically associated with the "France Natio
We have implanted DLP policies and straight away we have had a huge number of false positives specifically associated with the "France National ID Card (CNI)" rule. Looking at the information on this page: https://docs.microsoft.com/en-us/office365/securitycompliance/what-the-sensitive-information-types-look-for#france-national-id-card-cni The rule suggests a very simplistic 12 digit number and no keywords. This is, in our opinion, far too simplistic a check and the rule must have associated keywords to give the rule some form of validity and confidence. We have had to remove this specific check from our policies, which defeats the whole purpose of DLP!
Prateek Jain commented
Hi John, Thanks for your feedback. We are working on improving the accuracy of France CNI and are adding keywords to the definition. Could you share the potential keywords which are used with France CNI?