The Treatment, Drug, and Disease keyword lists in Symantec Data Loss Prevention 14.0 are too broad

Products

• Data Loss Prevention Enforce

Issue/Introduction

The Treatment, Drug, and Disease keyword lists in Symantec Data Loss Prevention 14.0 include many common words, such as "program" and "middle." These common words result in many false-positive results for HIPAA and Caldicott Report policies.

Resolution

This issue is fixed in Symantec Data Loss Prevention version 14.0.1 and later. If you cannot upgrade to one of these versions, Symantec recommends that you update your Treatment, Drug, and Disease keyword lists for your HIPAA and Caldicott Report policies using the keyword lists in the attached text files.

To replace your keywords for new or existing HIPAA policies, follow this procedure:

1. In each existing HIPAA policy or new policy using the "HIPAA and HITECH (including PHI)" template, click the link to edit the SSN and Drug Keywords (Keyword Match) rule.
   • Click Content Matches Keyword.
   • In the Match any Keyword field, select all the existing text and delete it.
   • Copy the text from HIPAA_Drugs.txt and paste it into the Match any Keyword field.
2. Click OK.
3. Click the link to edit the SSN and Treatment Keywords (Keyword Match) rule.
   • Click Content Matches Keyword.
   • In the Match any Keyword field, select all the existing text and delete it.
   • Copy the text from HIPAA_Treatments.txt and paste it into the Match any Keyword field.
4. Click OK.
5. Click the link to edit the SSN and Diseases Keywords (Keyword Match) rule.
   • Click Content Matches Keyword.
   • In the Match any Keyword field, select all the existing text and delete it.
   • Copy the text from HIPAA_Diseases.txt and paste it into the Match any Keyword field.
6. Click OK.
7. Click Save.

To replace your keywords for new or existing Caldicott Report policies, follow this procedure:

1. In each existing Caldicott Report policy or new policy using the "Caldicott Report" template, click the link to edit the Drug Keywords (Keyword Match) rule.
   • Click Content Matches Keyword.
   • In the Match any Keyword field, select all the existing text and delete it.
   • Copy the text from HIPAA_Drugs.txt and paste it into the Match any Keyword field.
2. Click OK.
3. Click the link to edit the Disease Keywords (Keyword Match) rule.
   • Click Content Matches Keyword.
   • In the Match any Keyword field, select all the existing text and delete it.
   • Copy the text from HIPAA_Disesases.txt and paste it into the Match any Keyword field.
4. Click OK.
5. Click the link to edit the Treatment Keywords (Keyword Match) rule.
   • Click Content Matches Keyword.
   • In the Match any Keyword field, select all the existing text and delete it.
   • Copy the text from HIPAA_Treatments.txt and paste it into the Match any Keyword field.
6. Click OK.
7. Click Save.