Executive Overview
Personal-data risk, at a glance.
The headline numbers, the risk posture, and the obligations that matter — the bottom line on personal-data exposure for leadership.
Across 1 scan, this assessment analysed 333,097 files and identified 104,327 containing personally identifiable information (31.3% exposure rate), with 244,968 total PII instances detected. Of these, 35,169 critical and 3,629 high-risk files require immediate attention. Date of Birth is the most frequently detected PII type (198,556 instances).
Risk posture
High
Overall exposure rating
38798 critical/high files
drive the rating
Restricted
6,996
Most-sensitive findings
3% of findings
restricted items
Estate exposed
34%
Of documents hold PII
104,327 of 309,603
documents
Critical-risk
35,169
Files at critical risk
3,629 high-risk
also need attention
Risk posture
65
Exposure index
Elevated exposure
A high share of identifiable records carry restricted-grade PII (TFN, Medicare, passport), concentrated in a small number of documents.
6,996 restricted-grade findingsWhat we found
1
Date of BirthConfidential
198,556
2
Person NameInternal
20,740
3
Centrelink CRNConfidential
18,362
4
Bank Account (BSB + Account)Restricted
5,219
5
Tax File Number (TFN)Restricted
1,469
Compliance impact
307,385 scanned · 2,218 partial · 632 declined · 22,844 excluded · 182 failed
Privacy Rule — permitted uses and disclosures of PHIHigh
Protected Health Information may only be used/disclosed as permitted by the rule or with authorization.
219,296 findings · 79,080 files
Top actions
1
Review the 6,996 restricted-grade findings flagged in this assessment.
2
Prioritise the highest-sensitivity data — Date of Birth and Centrelink CRN.
3
Apply retention policies to aged data — 8,104 findings sit in documents over 10 years old.