Supported Entity Types
Private AI supports over 50 different entity types, covering the GDPR, CPRA, HIPAA Safe Harbor, and Quebec Privacy Act. The complete list of supported entity types can be found below, including regulatory compliance information for each entity. The GDPR's distinction between personal data and sensitive data is also reflected below, with the categories GDPR and GDPR Sensitive, respectively. Sensitive data is a more restricted subset of personal data that cannot be processed without a documented, lawful reason, according to Article 9 of the GDPR. In general, we recommend using the broader category, GDPR.
Note that an entity can have multiple types and that some entities have subtypes, such as DATE and LOCATION. For example, LOCATION_CITY is a subtype of LOCATION. In a phrase such as I live in Boston, therefore, Boston will be detected as both LOCATION and LOCATION_CITY.
Some entity types are groupings. For example, the HIPAA Safe Harbor entity types health plan beneficiary number and medical record number are both recognized as HEALTHCARE_NUMBER. Similarly, NUMERICAL_PII covers a broad range of entity types such as MAC addresses and cookie IDs.
In addition to our standard entities, our Pro Tier offers custom entity types.
PII
Personally Identifiable Information
| Label | Description | Regulatory Compliance | Added In |
|---|---|---|---|
| AGE | Numbers associated with an individual’s age 27 years old; 18 months old More detailsWhen given in years, only the number is flagged, but both number and time unit are flagged when given in other units like months or weeks Also includes age ranges: 29-35 years old; 18+; A man in his forties |
GDPR, HIPAA, Quebec Privacy Act | 1.2.0 |
| DATE | Specific calendar dates, which can include days of the week, dates, months, or years Friday, Dec. 18, 2002; Dated: 02/03/97 See also: DATE_INTERVAL, DOB More detailsIf no calendar date is specified, days of the week are not flagged: Your appointment is on Monday Indexical terms are not flagged: yesterday; tomorrow |
HIPAA, Quebec Privacy Act | 1.0.0 |
| DATE_INTERVAL | Broader time periods, including date ranges, months, seasons, years, and decades 2020-2021; 5-9 May; January 1984 See also: DATE, DOB |
HIPAA | 2.5.0 |
| DOB | Dates of birth Born: March 7, 1961 See also: DATE, DATE_INTERVAL |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.4.0 |
| DRIVER_LICENSE | Driver's permit numbers DL# 134711-320 See also: VEHICLE_ID More detailsIncludes International Driving Permits (IDP) and Pilot’s licenses |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.8.0 |
| EMAIL_ADDRESS | Email addresses info@private-ai.com |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.0.0 |
| EVENT | Names of events or holidays Olympics; Yom Kippur |
1.0.0 | |
| FILENAME | Names of computer files, including the extension or filepath Taxes/2012/brad-tax-returns.pdf |
2.0.0 | |
| GENDER_SEXUALITY | Terms indicating gender identity or sexual orientation, including slang terms female; bisexual; trans |
CPRA, GDPR, GDPR Sensitive | 2.10.0 |
| HEALTHCARE_NUMBER | Healthcare numbers and health plan beneficiary numbers Policy No.: 5584-486-674-YM More detailsIncludes medical record numbers, health insurance policy/account numbers, and member IDs, for example, German Sozialversicherungsnummer (also used as SSN), Philippine PhilHealth ID number, Ukrainian VHI number |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.0.0 |
| IP_ADDRESS | Internet IP address, including IPv4 and IPv6 formats 192.168.0.1 2001:db8:0:0:0:8a2e::7334 |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.0.0 |
| LANGUAGE | Names of natural languages Korean; French |
GDPR, GDPR Sensitive | 1.0.0 |
| LOCATION | Metaclass for any named location reference; See subclasses below Eritrea; Lake Victoria More detailsMay co-occur with ORGANIZATION when the context refers explicitly to the organization’s location The patient was transferred to Northwest General Hospital |
GDPR, HIPAA | 1.0.0 |
| LOCATION_ADDRESS | Full or partial physical mailing addresses, which can include: building name or number, street, city, county, state, country, zip code 25/300 Adelaide T., Perth WA 6000, Aus. 145 Windsor St. Mail to: Kollwitzstr 13, 10405, Berlin |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.4.0 |
| LOCATION_CITY | Municipality names, including villages, towns, and cities Toronto; Berlin; Denpasar |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.4.0 |
| LOCATION_COORDINATE | Geographic positions referred to using latitude, longitude, and/or elevation coordinates We’re at 40.748440 and -73.984559 |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.10.0 |
| LOCATION_COUNTRY | Country names Canada; Namibia |
GDPR | 2.4.0 |
| LOCATION_STATE | State, province, territory, or prefecture names Ontario; Arkansas; Ich lebe in NRW |
GDPR | 2.4.0 |
| LOCATION_ZIP | Zip codes (including Zip+4), postcodes, or postal codes 90210; B2N 3E3 More detailsOptimized for various English-speaking locales (Australia, Canada, United Kingdom, United States), as well as international equivalents |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.4.0 |
| MARITAL_STATUS | Terms indicating marital status single; common-law; ex-wife; married |
2.10.0 | |
| MONEY | Names and/or amounts of currency 15 pesos; $94.50 |
1.0.0 | |
| NAME | Names of individuals, not including personal titles such as ‘Mrs.’ or ‘Mr.’ Dwayne Johnson; Mr. Khanna |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.0.0 |
| NAME_FAMILY | Names indicating a person’s family or community; often a last name in Western cultures and first name in Eastern cultures François Truffaut; Ozu Yasujirō |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.13.0 |
| NAME_GIVEN | Names given to an individual, usually at birth; often first / middle names in Western cultures and middle / last names in Eastern cultures François Truffaut; Ozu Yasujirō |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.13.0 |
| NUMERICAL_PII | Numerical PII that doesn't fall under other categories (e.g., medical device serial numbers, computer numbers like MAC addresses and cookie IDs) |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.0.0 |
| ORGANIZATION | Names of organizations or departments within an organization BHP; McDonald's; LAPD More detailsMay co-occur with LOCATION when the context refers explicitly to the organization’s location The patient was transferred to Northwest General Hospital |
Quebec Privacy Act | 1.0.0 |
| OCCUPATION | Job titles or professions professor; actors; engineer; CPA |
Quebec Privacy Act | 1.0.0 |
| ORIGIN | Terms indicating nationality, ethnicity, or provenance Canadian; Sri Lankan |
CPRA, GDPR, GDPR Sensitive, Quebec Privacy Act | 2.0.0 |
| PASSPORT_NUMBER | Passport numbers, issued by any country PA4568332; NU3C6L86S12 |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.9.0 |
| PASSWORD | Account passwords, PINs, access keys, or verification answers 27%alfalfa; temp1234 My mother's maiden name is Smith |
CPRA | 1.4.0 |
| PHONE_NUMBER | Telephone or fax numbers +4917643476050 |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.0.0 |
| PHYSICAL_ATTRIBUTE | Distinctive bodily attributes, including terms indicating race I'm 190cm tall; He belongs to the Black students’ association |
CPRA, GDPR, GDPR Sensitive | 2.0.0 |
| POLITICAL_AFFILIATION | Terms referring to a political party, movement, or ideology liberal; Republican |
CPRA, GDPR, GDPR Sensitive, Quebec Privacy Act | 2.9.0 |
| RELIGION | Terms indicating religious affiliation Hindu; Presbyterian |
CPRA, GDPR, GDPR Sensitive, Quebec Privacy Act | 1.3.0 |
| SSN | Social Security Numbers or international equivalent government identification numbers 078-05-1120; ***-***-3256 More detailsIncludes, for example, Australian TFN, British NIN, Canadian SIN, German Sozialversicherungsnummer (also used as a healthcare number, see: HEALTHCARE_NUMBER), French INSEE, Indian Aadhaar, Italian TIN, Philippine SSS, Spanish NUSS, Ukrainian TIN, and Mexican NSS formats. Flags mentions of complete numbers as well as the last four digits only. |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.0.0 |
| TIME | Expressions indicating clock times 19:37:28; 10pm EST |
1.0.0 | |
| URL | Internet addresses www.private-ai.com |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.0.0 |
| USERNAME | Usernames, login names, or handles privateairocks; @_PrivateAI |
CPRA, GDPR | 1.3.0 |
| VEHICLE_ID | Vehicle identification numbers (VINs), vehicle serial numbers, and license plate numbers 5FNRL38918B111818; BIF7547 See also: DRIVER_LICENSE |
CPRA, GDPR, HIPAA | 2.11.0 |
| ZODIAC_SIGN | Names of Zodiac signs Aries; Taurus |
2.1.2 |
PHI
Protected Health Information
| Label | Description | Regulatory Compliance | Added In |
|---|---|---|---|
| BLOOD_TYPE | Blood types She's type AB positive |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.0.0 |
| CONDITION | Names of medical conditions, diseases, syndromes, deficits, disorders chronic fatigue syndrome; arrhythmia; depression |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.0.0 |
| DOSE | Medically prescribed quantity of a medication limit intake to 700 mg/day |
2.14.0 | |
| DRUG | Medications, vitamins, and supplements advil; Acetaminophen; Panadol |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.0.0 |
| INJURY | Bodily injuries, including mutations, miscarriages, and dislocations I broke my arm; I have a sprained wrist |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.0.0 |
| MEDICAL_PROCESS | Medical processes, including treatments, procedures, and tests heart surgery; CT scan |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.0.0 |
| STATISTICS | Medical statistics 18% of patients |
HIPAA, Quebec Privacy Act | 2.0.0 |
PCI
Payment Card Industry
| Label | Description | Regulatory Compliance | Added In |
|---|---|---|---|
| BANK_ACCOUNT | Bank account numbers and international equivalents, such as IBAN Acct. No.: 012345-67 |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 2.3.0 |
| CREDIT_CARD | Credit card numbers 0123 0123 0123 0123 **** **** ****4252 More detailsIncludes debit, ATM, Direct Debit, PrePay, Charge Cards, and support for cards that do not have 16 digits such as American Express or China UnionPay cards. Flags mentions of complete numbers as well as the last four digits only. |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.0.0 |
| CREDIT_CARD_EXPIRATION | Expiration date of a credit card Expires: July 2023; Exp: 02/28 |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.4.0 |
| CVV | 3- or 4-digit card verification codes and equivalents CVV: 080 More detailsIncludes institution-specific variants: American Express: CID (card ID), CVD (card verification data) CSC / 3CSC (card security code) China UnionPay: CVN (card validation number) CIBC Mastercard: SPC (signature panel code) Discover: CID (card ID), CVD (card verification data) ELO (Brazil): CVE (Elo verification code) JCB (Japan Credit Bureau): CAV (card authentication value) Mastercard: CVC (card validation code) VISA: CVV (card verification value) |
CPRA, GDPR, HIPAA, Quebec Privacy Act | 1.4.0 |
| ROUTING_NUMBER | Routing number associated with a bank or financial institution 012345678 More detailsIncludes international equivalents: Canadian & British sort codes, Australian BSB numbers, Indian Financial System Codes, Branch/transit numbers, Institution numbers, and Swift codes |
2.3.0 |