Data Breach Response

The information on this page applies to Data Breach Response's legacy workflow. For aiR for Data Breach Response documentation, see aiR for Data Breach Response.

Data Breach Response is a Relativity application purpose-built to simplify and accelerate the complex process of identifying sensitive information and matching it to the relevant entity, generating a notification list of impacted individuals.

Data Breach Response workflows have integrated PI identification to find pre-determined PI types, such as SSN, date of birth, credit card information, PHI, and more. PI is automatically linked for structured documents, which speeds up the review and quality control (QC) process. Data Breach Response also leverages AI to deduplicate entities across documents to produce a notification list, allowing you to respond within the mandated timeline.

This product is available as a Relativity application (RAP) called Data Breach Response. The application can be installed into a RelativityOne Review workspace that runs within a RelativityOne production environment. The data used for analysis never leaves the RelativityOne security boundary, which aligns with security and compliance requirements defined in RelativityOne contracts.

• Input—Documents identified by a Saved Search to be analyzed by Data Breach Response.
• Output—A notification report containing impacted individuals and their associated personal information.

Conceptual workflow

The steps below illustrate high level workflow steps for the Data Breach Response product

1. Upload and process documents in your RelativityOne environment.
2. Configure the Data Breach Response application into your environment.
3. Start a new Data Breach ingestion job and select the saved search of documents for review.
4. Select personal information detectors to use and add any custom detectors.
5. Run the AI pipeline across the document set by going to the Data Analysis tab. You will immediately start to get insights on identified PI and have the ability to review documents as PI detection completes.
   You can access documents ready for review on the project dashboard in real time. If the normalizer step is run the entity report is also automatically generated.
6. Access the Project Dashboard to view personal information identified across the document set.

7. Review the notification list in the Entity Analysis tab to resolve conflicts and finalize your desired output.

8. Create a notification report.

Document requirements

File limitations for Data Breach Response are as follows:

• Data Breach Response can support up to 300M personal information annotations and 150M entities, represented across 1 TB of native data in a Data Breach Response workspace.
• Extracted text files should be provided for all document types. For PDFs, predictions cannot be accurately made without a proper extracted text file.
  Customers can OCR in RelativityOne. See OCR for instructions.

• The following document types are not supported:
  • Documents that open with an error or warning
  • Excel files older than Excel 95 (v 7.0)
  • Native spreadsheets greater than 40MB
  • Native non-spreadsheets greater than 75MB

Structured and Unstructured documents

Data Breach Response categorizes documents as either Structured or Unstructured, each requiring a distinct approach to identifying PI.

• Structured documents—contain data that is organized in a specific and predefined way, typically in a table with columns and rows where each data point has a specific data type.
  Examples of structured documents include databases, spreadsheets and CSV files. Data Breach Response identifies table boundaries and detects header & column content to predict PI.
  To review Structured documents, see Structured document review.
• Unstructured documents—contain unlabeled or otherwise unorganized data. The content on the files are usually composed of natural language.
  Examples of unstructured documents include text-based documents such as emails, word processing documents, and forms with additional unstructured data sources such as photos, and audio files. Data Breach Response uses the context of the document to differentiate different types of PI. To review Unstructured documents, see Unstructured document review.

Supported file types

Document type	Supported extensions	Limitations and notes
Structured documents	.csv, .tsv, .xls, .xlsx, .xlsm, .xlt, .xltm, .xltx, .xlsb	CSVs must be delimited by comma. No other delimiter is supported. TSVs must be delimited by tab. No other delimiter is supported.
Unstructured documents	.ppt, .pptx, .pptm, .doc, .docx , .txt , .eml, .msg, .mht, .svg, .pdf, .fdf, .xfdf, .pub, .dwg, .dxf, .dgn, .rvt, .dwf, .odt, .odp, .rtf, .wpf, .bmp, .jpg, .jpeg, .png, .wmf, .emf, .gif, .hdp, .jp2, .jpc, .tif, .tiff, .xps, .oxps, .xml, .xod, .xaml, .vcf	Embedded documents are not supported. Extracted text is leveraged for emails, so formatting may be lost.

Language support in Data Breach Response

Data Breach Response has primarily been tested in English language documents. There is support for additional languages. See OOTB detectors for details.

Limitations

The following are limitations to consider when using Data Breach Response:

• Data Breach Response cannot be run in a repository workspace

• The Data Breach Response application is not compatible with ARM.
  

Out of the box detectors

Data Breach Response is pre-configured with PI detectors, also referred to as Out of the Box (OOTB) detectors. Detectors are predefined or custom rules that identify specific types of PI.

Before running Data Analysis you should review detectors and enable or disable any which make sense for your project.

Enable and disable detectors

To enable detectors:

1. Navigate to Data Breach Response and select the Settings tab.
2. Click the checkbox next to any detectors you want to enable.
3. Select the Enable Detectors mass action.
   
4. Confirm your choice by clicking Enable.

To disable detectors:

1. Navigate to Data Breach Response and select the Settings tab.
2. Click the checkbox next to any detectors you want to enable.
3. Select the Disable Detectors mass action.
   
4. Confirm your choice by clicking Disable.

PI level detectors

Data Breach Response supports the following OOTB detectors.

Detector name	Category	Supported Document Languages	Default Status
ABA Routing Number	United States	English	Off
Address	Contact	English, French, Italian, Spanish, German, Greek, Dutch, Portuguese, Hungarian, Polish, Chinese, Indonesian, Maltese, Malay, Korean, Japanese	On
Age	Demographic	English	Off
Argentina National Identity Number	Latin America	English, Spanish	Off
Australia Bank Account Number	Financial	English	Off
Australia Business Number	Financial	English	Off
Australia Company Number	Asia Pacific	English	Off
Australia Driver License	Asia Pacific	English	Off
Australia Medical Account Number	Asia Pacific	English	Off
Australia Passport Number	Asia Pacific	English	Off
Australia Tax File Number	Asia Pacific	English	Off
Austria Identity Card	Europe Middle East and Africa	German	Off
Austria Tax Identification Number	Europe Middle East and Africa	English, German	Off
Austria Value Added Tax Number	Europe Middle East and Africa	English, German	Off
Belgium National Number	Europe Middle East and Africa	English, French, German, Dutch	Off
Belgium Value Added Tax Number	Europe Middle East and Africa	English, French, German, Dutch	Off
Brazil CPF Number	Latin America	English, Portuguese	Off
Brazil Legal Entity Number	Latin America	English, Portuguese	Off
Brazil National ID Card	Latin America	English, Portuguese	Off
Canada Bank Account Number	North America	English, French	On
Canada Driver License Number	North America	English, French	On
Canada Health Service Number	North America	English, French	On
Canada Passport Number	North America	English, French	On
Canada Personal Health Identification Number	North America	English, French	On
Canada Social Insurance Number	North America	English, French	On
Chile Identity Card Number	Latin America	English, Spanish	Off
China Resident Identity Card Number	Asia Pacific	English, Chinese (Traditional)	Off
Credit Card Expiration	Financial	English	On
Credit Card Number	Financial	English	On
Credit Card Security Code	Financial	English	On
Date of Birth	Demographic	English	On
Date of Death	Patient	English	On
Date	Other	English	Off
Email Address	Contact	English	On
EU Debit Card Number	Europe, Middle East and Africa	English, German, French, Dutch, Portuguese, Spanish, Italian, Czech, Hungarian, Danish, Finnish	On
EU Driver License Number	Europe, Middle East and Africa	English, German, French, Dutch, Portuguese, Spanish, Italian, Czech, Hungarian, Danish, Finnish	On
EU GPS Coordinates	Europe, Middle East and Africa	English, German, French, Dutch, Portuguese, Spanish, Italian, Czech, Hungarian, Danish, Finnish	On
EU National Identification Number	Europe, Middle East and Africa	English, German, French, Dutch, Portuguese, Spanish, Italian, Czech, Hungarian, Danish, Finnish	On
EU Passport Number	Europe, Middle East and Africa	English, German, French, Dutch, Portuguese, Spanish, Italian, Czech, Hungarian, Danish, Finnish	On
EU Social Security Number	Europe, Middle East and Africa	English, German, French, Dutch, Portuguese, Spanish, Italian, Czech, Hungarian, Danish, Finnish	On
EU Tax Identification Number	Europe, Middle East and Africa	English, German, French, Dutch, Portuguese, Spanish, Italian, Czech, Hungarian, Danish, Finnish	On
Financial Account Number	Financial	English	On
Financial Institution	Financial	English	On
Financial Password	Financial	English	Off
France Driver License Number	Europe, Middle East and Africa	English, French	Off
France Health Insurance Number	Europe, Middle East and Africa	English, French	Off
France National ID Card	Europe, Middle East and Africa	English, French	Off
France Passport Number	Europe, Middle East and Africa	English, French	Off
France Social Security Number	Europe, Middle East and Africa	English, French	Off
France Tax Identification Number	Europe, Middle East and Africa	English, French	Off
France Value Added Tax Number	Europe, Middle East and Africa	English, French	Off
Full Name	Contact	English, French, Italian, Spanish, German, Greek, Dutch, Portuguese, Hungarian, Polish, Chinese, Indonesian, Maltese, Malay, Korean, Japanese	On
German Driver License Number	Europe, Middle East and Africa	English, German	Off
Germany Identity Card Number	Europe, Middle East and Africa	English, German	Off
Germany Passport Number	Europe, Middle East and Africa	English, German	Off
Germany Tax Identification Number	Europe, Middle East and Africa	English, German	Off
Germany Value Added Tax Number	Europe, Middle East and Africa	English, German	Off
Hong Kong Identity Card Number	Asia Pacific	English, Chinese (Traditional)	Off
Hungary Personal Identification Number	Europe, Middle East and Africa	English, Hungarian	Off
Hungary Tax Identification Number	Europe, Middle East and Africa	English, Hungarian	Off
Hungary Value Added Tax Number	Europe, Middle East and Africa	English, Hungarian	Off
IMEI Number	Other	English	Off
India Permanent Account Number	Asia Pacific	English	Off
India Unique Identification Number	Asia Pacific	English, Hindi	Off
Indonesia Identity Card Number	Asia Pacific	English, Indonesian	Off
International Banking Account Number	Financial	English, Bulgarian, Croatian, Czech, Danish, Dutch, Estonian, Finnish, French, German, Greek, Hungarian, Italian, Latvian, Lithuanian, Maltese, Polish, Portuguese, Romanian, Slovak, Slovenian, Spanish, Swedish, Turkish, Chinese (Simplified), Korean	Off
IP Address	Security	English	Off
Ireland Personal Public Service Number (post-2013)	Europe, Middle East and Africa	English, Irish	Off
Ireland Personal Public Service Number (pre-2013)	Europe, Middle East and Africa	English, Irish	Off
Israel Bank Account Number	Europe, Middle East and Africa	English, Hebrew	Off
Israel National ID	Europe, Middle East and Africa	English, Hebrew	Off
Italy Driver License ID	Europe, Middle East and Africa	English, Italian	Off
Italy Fiscal Code	Europe, Middle East and Africa	English, Italian	Off
Italy Value Added Tax Number	Europe, Middle East and Africa	English, Italian	Off
Japan Bank Account Number	Asia Pacific	English, Japanese	Off
Japan Corporate My Number	Asia Pacific	English, Japanese	Off
Japan Driver License Number	Asia Pacific	English, Japanese	Off
Japan Passport Number	Asia Pacific	English, Japanese	Off
Japan Personal My Number	Asia Pacific	English, Japanese	Off
Japan Residence Card Number	Asia Pacific	English, Japanese	Off
Japan Resident Registration Number	Asia Pacific	English, Japanese	Off
Japan Social Insurance Number	Asia Pacific	English, Japanese	Off
Luxembourg National Identification Number (Natural Persons)	Europe, Middle East and Africa	English, French, German,	Off
Luxembourg National Identification Number (Non-Natural Persons)	Europe, Middle East and Africa	English, French, German,	Off
Malta Identity Card Number	Europe, Middle East and Africa	English, Maltese	Off
Malta Tax Identification Number	Europe, Middle East and Africa	English, Maltese	Off
Medical Information	Patient	English	Off
New Zealand Bank Account Number	Asia Pacific	English, Māori	Off
New Zealand Driver License Number	Asia Pacific	English, Māori	Off
New Zealand Inland Revenue Number	Asia Pacific	English, Māori	Off
New Zealand Ministry Of Health Number	Asia Pacific	English, Māori	Off
New Zealand Social Welfare Number	Asia Pacific	English, Māori	Off
Organization	Other	English	Off
Other	Other	English	Off
Partial Credit Card Number	Financial	English	Off
Partial Date of Birth (Year Only)	Demographic	English	Off
Partial Social Security Number	Financial	English	On
Password	Security	English	On
Patient ID	Patient	English	Off
Person Type	Other	English	Off
Personal Email Address	Contact	English	Off
Personal US Phone Number	Contact	English	Off
Philippines Unified Multi-Purpose ID Number	Asia Pacific	English, Tagalog	Off
Phone Number	Contact	English, Chinese, Japanese, Korean, Russian, Greek, Italian, French, German, Spanish, Portuguese, Dutch, Swedish, Finnish, Danish, Norwegian, Polish, Czech, Slovak, Hungarian, Romanian, Lithuanian, Latvian, Estonian, Maltese, Serbo-Croatian, Bulgarian, Turkish, Hebrew, Arabic, Tamil, Malay, Indonesian	On
PIN	Security	English	Off
Portugal Citizen Card Number	Europe, Middle East and Africa	English, Portuguese	Off
Portugal Tax Identification Number	Europe, Middle East and Africa	English, Portuguese	Off
Signature	Other	English	Off
Singapore National Registration ID Card Number	Asia Pacific	English, Portuguese, Chinese	Off
South Africa Identification Number	Europe, Middle East and Africa	English	Off
South Korea Resident Registration Number	Asia Pacific	English, Korean	Off
Spain DNI	Europe, Middle East and Africa	English, Spanish	Off
Spain Social Security Number	Europe, Middle East and Africa	English, Spanish	Off
Spain Tax Identification Number	Europe, Middle East and Africa	English, Spanish	Off
SWIFT code	Financial	English, Bulgarian, Croatian, Czech, Danish, Dutch, Estonian, Finnish, French, German, Greek, Hungarian, Italian, Latvian, Lithuanian, Malagasy, Maltese, Polish, Portuguese, Romanian, Slovak, Slovenian, Spanish, Swedish, Turkish, Ukrainian, Chinese (Simplified), Japanese, Korean, Thai	On
Swiss Social Security Number AHV	Switzerland	French, German, French	Off
Taiwan National ID	Asia Pacific	English, Chinese (Traditional)	Off
Taiwan Passport Number	Asia Pacific	English, Chinese (Traditional)	Off
Taiwan Resident Certificate	Asia Pacific	English, Chinese (Traditional)	Off
U.K. Driver License Number	Europe, Middle East and Africa	English	On
U.K. Electoral Roll Number	Europe, Middle East and Africa	English	On
U.K. National Health Service Number	Europe, Middle East and Africa	English	On
U.K. National Insurance Number	Europe, Middle East and Africa	English	On
U.K. Unique Taxpayer Reference Number	Europe, Middle East and Africa	English	On
U.S. Bank Account Number	North America	English	On
U.S. Driver's License Number	North America	English	On
U.S. Drug Enforcement Agency Number	North America	English	Off
U.S. Individual Taxpayer Identification Number	North America	English	On
U.S. or U.K. Passport Number	Identification	English	On
U.S. Social Security Number	North America	English	On
URL	Other	English, Spanish, French, German, Italian, Chinese (Simplified), Japanese, Korean, Portuguese (Portugal and Brazil)	Off
Username	Security	English	On

Frequently asked questions