Question

Contoso's compliance team reports that scanned images (JPG and PNG files) containing credit card numbers stored in SharePoint are not being detected by their auto-labeling policies, even though the same content in Word documents is detected correctly. The policy uses the built-in Credit Card Number sensitive information type. What must the administrator do to enable detection of the sensitive content inside these image files?

Accepted Answer

Turn on optical character recognition (OCR) for Microsoft Purview and ensure the OCR add-on billing/consumption is configured so images can be scanned for text-based SITs

Answer

Create a custom sensitive information type with a higher confidence level and a supporting keyword dictionary for card issuers

Answer

Deploy document fingerprinting on a standard credit card authorization form to match the image contents

Answer

Configure an exact data match (EDM) schema using a table of known credit card numbers and upload the hashed data