Patent Document ID: 9015802
Application ID: 14024943

Base Claim:
1. A method performed by data processing apparatus, the method comprising: accessing, by a data processing apparatus, personally identifiable information (PII) type definitions that characterize PII types; identifying, by the data processing apparatus, PII type information included in content of a web page, the PII type information being information matching at least one PII type definition; identifying a sup-portion of content of the web page, the sub-potion of content being content within a window that includes the PII type information and additional content and excluding other content of the web page; identifying, by the data processing apparatus, secondary information included in the sub-portion of content of the web page, the secondary information being content that matches information that is predefined as being associated with PII type information; determining a risk score from the PII type information and the secondary information; and classifying the web page as a personal information exposure risk if the risk score meets a confidentiality threshold, wherein the personal information exposure risk is indicative of the web page including personally identifiable information.

---

Claim 3:
3. The method of claim 1 , wherein the PII type definitions include, for each of a plurality of payment cards having a corresponding payment card number that conforms to a payment card number format, a card number template having data determining a match of content to the payment card number format.