PII/PHI Detection Flag for Content Ingestion

Summary
Add an automated flag or alert when content being ingested (files, sites, and other sources) may contain PII or PHI.

Background
Each ingestion is reviewed with the requesting teams. However, ingestion requests can include thousands of files, and manual review at that scale always carries some risk that sensitive content goes unnoticed.

Proposed Capability
A detection safeguard that complements the existing review process rather than replacing it. Possible implementations include:

• A warning at ingestion time when potential PII/PHI is detected
• A report of flagged files for review before content is made available
• A configurable detection setting (for example, enable/disable or adjustable sensitivity)

Value

• Adds a safety net at scale, reducing the chance that sensitive content is ingested unnoticed
• Supports existing review workflows and strengthens data protection posture
• Reduces the risk of missed sensitive content by highlighting potential PII/PHI for reviewers, while human review remains in place