Protected Health Information

This is a DLP detector that you can easily use or extend upon in the Nightfall platform.

Description	Detects protected health information (PHI). HIPAA defines PHI as data that uniquely identifies an individual plus a diagnostic indicator such as medication, diagnosis, and procedure.
Detector type	AI Model (Entity Detection)
Category	Health
Region	Global
Tags	health pii hipaa
Enum (for using this detector via the API)	`PROTECTED_HEALTH_INFORMATION`

Used in These Detection Rules

Protected Health Information (PHI)

Aims to prevent the exposure of sensitive patient health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA). Detects data that uniquely identifies an individual in combination with a diagnostic indicator such as medication, diagnosis, and procedure.

Used in These Policies

Detect HIPAA Violations in Slack and Notify

This policy enables you to detect protected health information (PHI) in unsanctioned Slack channels and automatically notify the end-user to self-remeidate the issue.

Slack

Detect Sensitive Data Per ISO 27001 in Google Drive (US) and Notify

This policy enforces broad protection of sensitive assets in GDrive in compliance with ISO2 70001.

Google Drive

Detect HIPAA Violations in Jira and Notify

Detect and automatically notify when protected health information (PHI) is found in Jira

Jira

Detect HIPAA Violations in Confluence and Notify

Detect and automatically notify when protected health information (PHI) is found in Confluence

Confluence

Prevent Sharing of Protected Health Information (PHI) with ChatGPT

Detect and automatically block protected health information (PHI) from being shared with ChatGPT

ChatGPT

Detect HIPAA Violations in Salesforce and Notify

Detect and automatically notify when protected health information (PHI) is found in Salesforce

Salesforce

Detect HIPAA Violations in Zendesk and Notify

Detect and automatically notify when protected health information (PHI) is found in Zendesk

Zendesk

Detect HIPAA Violations in Microsoft Teams and Notify

Detect and automatically notify when protected health information (PHI) is found in Microsoft Teams

Microsoft Teams

Detect HIPAA Violations in Microsoft OneDrive and Remediate

Detect and automatically notify when protected health information (PHI) is found in OneDrive accessible outside the organization or via public link. Automatically restrict access to the Owner.

Microsoft OneDrive

Detect HIPAA Violations in Notion and Notify

Detect and automatically notify when protected health information (PHI) is found in Notion

Notion

Monitor bulk downloads of Protected Health Information (PHI) from Google Drive

Detect when a user downloads more than 5 files containing protected health information (PHI) in 24 hours

Google Drive

Prevent Sharing of Protected Health Information (PHI) via Gmail and Notify

Detect and automatically block protected health information (PHI) from being shared via Gmail, Notify the user

Gmail

Detect Protected Health Information (PHI) in Text Payload and Redact

Detect and automatically redact when protected health information (PHI) is found in a text scan.

API

Use Detector via API

Read API Reference

curl --request POST \
     --url https://api.nightfall.ai/v3/scan \
     --header 'Accept: application/json' \
     --header 'Authorization: Bearer  REPLACE-WITH-YOUR-KEY' \
     --header 'Content-Type: application/json' \
     --data '
{
     "policy": {
          "detectionRules": [
               {
                    "detectors": [
                         {
                              "minNumFindings": 1,
                              "minConfidence": "LIKELY",
                              "displayName": "Protected Health Information",
                              "detectorType": "NIGHTFALL_DETECTOR",
                              "nightfallDetector": "PROTECTED_HEALTH_INFORMATION"
                         }                    ],
                    "name": "My Inline Detection Rule",
                    "logicalOp": "ANY"
               }
          ]
     },
     "payload": [
          "INSERT 1+ PAYLOAD(S)",
          "INSERT 1+ PAYLOAD(S)"
     ]
}
'


          import requests
          import json

          api_key = "REPLACE-WITH-YOUR-KEY"
          url = "https://api.nightfall.ai/v3/scan"

          headers = {
              "Accept": "application/json",
              "Authorization": f"Bearer {api_key}",
              "Content-Type": "application/json"
          }

          payload = {
              "policy": {
                  "detectionRules": [
                      {
                          "detectors": [
                              {
                                  "minNumFindings": 1,
                                  "minConfidence": "LIKELY",
                                  "displayName": "Protected Health Information",
                                  "detectorType": "NIGHTFALL_DETECTOR",
                                  "nightfallDetector": "PROTECTED_HEALTH_INFORMATION"
                              }
                          ],
                          "name": "My Inline Detection Rule",
                          "logicalOp": "ANY"
                      }
                  ]
              },
              "payload": [
                  "INSERT 1+ PAYLOAD(S)",
                  "INSERT 1+ PAYLOAD(S)"
              ]
          }

          response = requests.post(url, headers=headers, data=json.dumps(payload))
          print(response.status_code)
          print(response.json())

Protected Health Information Validator

Input any text to validate or test. The default minimum confidence is set to "Possible".