PII Type Distribution(5.4.6)

The three detection patterns do not carry the same risk, and they do not carry the same confidence either. An email address in an issue title is a different matter from a run of digits in a comment body. Understanding the distribution across the portfolio helps focus remediation on the pattern that is actually driving the total.

What you can conclude

• A portfolio dominated by email detections likely has a copy-paste habit from customer communications, which is a training and workflow redesign opportunity.
• A high proportion of phone-shaped digits or numeric IDs may indicate customer reference numbers used as shortcuts, or may simply be internal identifiers. Sample the entries before deciding which.
• An even distribution across patterns suggests multiple independent sources of personal data entering Jira, and a broader process review.

How this chart works

Horizontal bar chart showing the share of each pattern across all projects combined. An issue matching two patterns is counted in both, so the bars overlap rather than partition the total. Use the date filter to compare distribution across periods. Note: this visual shows portfolio-wide totals regardless of the project filter. Use the PII Detections by Project visual for project-specific breakdowns.

What each pattern actually matches. Email is a conventional address pattern. Phone-shaped digits means a standalone run of 7 to 15 digits that does not parse as a calendar date (20260421) or a date-and-time (20260730180000); those shapes are excluded, but other long numbers of the same length are not. Numeric ID is a standalone run of 6 to 12 digits, the loosest of the three.

For a GDPR review, the pattern mix is usually the first thing asked about.