{
  "default_for_unmatched_sensitive": "REDACT",
  "kind": "MASKING",
  "masking_domains": [
    {
      "description": "Student numbers in every system (SIS, identity, LMS, finance)",
      "digits": 9,
      "kind": "IDENTIFIER",
      "name": "EDU_STUDENT_ID",
      "version": 1
    },
    {
      "description": "Staff numbers of teachers, lecturers and administrators",
      "digits": 7,
      "kind": "IDENTIFIER",
      "name": "EDU_STAFF_ID",
      "version": 1
    }
  ],
  "rules": [
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "ACCOMMODATION",
      "selector": {
        "column_pattern": "accommodation_code",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NULLIFY"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "CONTACT_RESTRICTION",
      "selector": {
        "column_pattern": "contact_restriction",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NULLIFY"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "GUARDIAN_EMAIL",
      "selector": {
        "column_pattern": "email",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": "guardians"
      },
      "strategy": "NULLIFY"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "GUARDIAN_PHONE",
      "selector": {
        "column_pattern": "phone",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": "guardians"
      },
      "strategy": "NULLIFY"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "INCOME_BAND",
      "selector": {
        "column_pattern": "household_income_band",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NULLIFY"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FEEDBACK",
      "selector": {
        "column_pattern": "feedback",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NULLIFY"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "CLIENT_IP",
      "selector": {
        "column_pattern": "client_ip",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NULLIFY"
    },
    {
      "key_ref": "vault://datanivra-pack-template/linkage-key",
      "key_version": 1,
      "masking_domain": "EDU_STUDENT_ID",
      "parameters": {},
      "plugin": null,
      "preserve_format": true,
      "preserve_linkage": true,
      "preserve_nulls": true,
      "rule_id": "KEY_STUDENT_ID",
      "selector": {
        "column_pattern": "student_id",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "HMAC_PSEUDONYMIZE"
    },
    {
      "key_ref": "vault://datanivra-pack-template/linkage-key",
      "key_version": 1,
      "masking_domain": "EDU_STUDENT_ID",
      "parameters": {},
      "plugin": null,
      "preserve_format": true,
      "preserve_linkage": true,
      "preserve_nulls": true,
      "rule_id": "KEY_STUDENT_REF",
      "selector": {
        "column_pattern": "student_ref",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "HMAC_PSEUDONYMIZE"
    },
    {
      "key_ref": "vault://datanivra-pack-template/linkage-key",
      "key_version": 1,
      "masking_domain": "EDU_STUDENT_ID",
      "parameters": {},
      "plugin": null,
      "preserve_format": true,
      "preserve_linkage": true,
      "preserve_nulls": true,
      "rule_id": "KEY_LEARNER_REF",
      "selector": {
        "column_pattern": "learner_ref",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "HMAC_PSEUDONYMIZE"
    },
    {
      "key_ref": "vault://datanivra-pack-template/linkage-key",
      "key_version": 1,
      "masking_domain": "EDU_STUDENT_ID",
      "parameters": {},
      "plugin": null,
      "preserve_format": true,
      "preserve_linkage": true,
      "preserve_nulls": true,
      "rule_id": "KEY_USERNAME",
      "selector": {
        "column_pattern": "username",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "HMAC_PSEUDONYMIZE"
    },
    {
      "key_ref": "vault://datanivra-pack-template/linkage-key",
      "key_version": 1,
      "masking_domain": "EDU_STAFF_ID",
      "parameters": {},
      "plugin": null,
      "preserve_format": true,
      "preserve_linkage": true,
      "preserve_nulls": true,
      "rule_id": "KEY_STAFF_ID",
      "selector": {
        "column_pattern": "staff_id",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "HMAC_PSEUDONYMIZE"
    },
    {
      "key_ref": "vault://datanivra-pack-template/linkage-key",
      "key_version": 1,
      "masking_domain": "EDU_STAFF_ID",
      "parameters": {},
      "plugin": null,
      "preserve_format": true,
      "preserve_linkage": true,
      "preserve_nulls": true,
      "rule_id": "KEY_INSTRUCTOR_REF",
      "selector": {
        "column_pattern": "instructor_ref",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "HMAC_PSEUDONYMIZE"
    },
    {
      "key_ref": "vault://datanivra-pack-template/linkage-key",
      "key_version": 1,
      "parameters": {},
      "plugin": null,
      "preserve_format": true,
      "preserve_linkage": true,
      "preserve_nulls": true,
      "rule_id": "REF_NATIONAL_ID",
      "selector": {
        "column_pattern": "national_id",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "HMAC_PSEUDONYMIZE"
    },
    {
      "key_ref": "vault://datanivra-pack-template/linkage-key",
      "key_version": 1,
      "parameters": {},
      "plugin": null,
      "preserve_format": true,
      "preserve_linkage": true,
      "preserve_nulls": true,
      "rule_id": "REF_PAYMENT_REFERENCE",
      "selector": {
        "column_pattern": "payment_reference",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "HMAC_PSEUDONYMIZE"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {
        "NAME_PART": "GIVEN"
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "GIVEN_NAME",
      "selector": {
        "column_pattern": "given_name",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NAME_REPLACE"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {
        "NAME_PART": "GIVEN"
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "PREFERRED_NAME",
      "selector": {
        "column_pattern": "preferred_name",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NAME_REPLACE"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {
        "NAME_PART": "FAMILY"
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FAMILY_NAME",
      "selector": {
        "column_pattern": "family_name",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NAME_REPLACE"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "EMAIL",
      "selector": {
        "column_pattern": "*email",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "EMAIL_REPLACE"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "PHONE",
      "selector": {
        "column_pattern": "phone",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "PHONE_REPLACE"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {
        "DATE_SHIFT_MAX_DAYS": 30
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "BIRTH_DATE",
      "selector": {
        "column_pattern": "birth_date",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "DATE_SHIFT"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {
        "ADDRESS_PART": "STREET"
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "STREET",
      "selector": {
        "column_pattern": "street_address",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "ADDRESS_REPLACE"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {
        "ADDRESS_PART": "CITY"
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "CITY",
      "selector": {
        "column_pattern": "city",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "ADDRESS_REPLACE"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {
        "ADDRESS_PART": "POSTAL_CODE"
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "POSTAL",
      "selector": {
        "column_pattern": "postal_code",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "ADDRESS_REPLACE"
    },
    {
      "key_ref": "vault://datanivra-pack-template/linkage-key",
      "key_version": 1,
      "parameters": {
        "DATE_SHIFT_ENTITY_COLUMN": "learner_ref",
        "DATE_SHIFT_MAX_DAYS": 30
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": true,
      "preserve_nulls": true,
      "rule_id": "OCCURRED_AT",
      "selector": {
        "column_pattern": "occurred_at",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": "activity_events"
      },
      "strategy": "DATE_SHIFT"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": "EDU_GRADE_BAND",
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "GRADE_BAND",
      "selector": {
        "column_pattern": "grade",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "CUSTOM_PLUGIN"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {
        "PERTURB_RELATIVE": 0.05
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "SCORE",
      "selector": {
        "column_pattern": "score",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NUMERIC_PERTURB"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "SAFEGUARDING_CHECK",
      "selector": {
        "column_pattern": "safeguarding_check",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "REDACT"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "PASSWORD_HASH",
      "selector": {
        "column_pattern": "password_hash",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NULLIFY"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {
        "PERTURB_RELATIVE": 0.05
      },
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "MONEY_AMOUNT",
      "selector": {
        "column_pattern": "amount",
        "schema_pattern": null,
        "sensitivity_class": null,
        "table_pattern": null
      },
      "strategy": "NUMERIC_PERTURB"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FALLBACK_CREDENTIAL",
      "selector": {
        "column_pattern": null,
        "schema_pattern": null,
        "sensitivity_class": "CREDENTIAL",
        "table_pattern": null
      },
      "strategy": "NULLIFY"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FALLBACK_PAYMENT",
      "selector": {
        "column_pattern": null,
        "schema_pattern": null,
        "sensitivity_class": "PAYMENT",
        "table_pattern": null
      },
      "strategy": "REDACT"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FALLBACK_DIRECT_IDENTIFIER",
      "selector": {
        "column_pattern": null,
        "schema_pattern": null,
        "sensitivity_class": "DIRECT_IDENTIFIER",
        "table_pattern": null
      },
      "strategy": "REDACT"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FALLBACK_PHI",
      "selector": {
        "column_pattern": null,
        "schema_pattern": null,
        "sensitivity_class": "PHI",
        "table_pattern": null
      },
      "strategy": "REDACT"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FALLBACK_PII",
      "selector": {
        "column_pattern": null,
        "schema_pattern": null,
        "sensitivity_class": "PII",
        "table_pattern": null
      },
      "strategy": "REDACT"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FALLBACK_QUASI_IDENTIFIER",
      "selector": {
        "column_pattern": null,
        "schema_pattern": null,
        "sensitivity_class": "QUASI_IDENTIFIER",
        "table_pattern": null
      },
      "strategy": "REDACT"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FALLBACK_FINANCIAL",
      "selector": {
        "column_pattern": null,
        "schema_pattern": null,
        "sensitivity_class": "FINANCIAL",
        "table_pattern": null
      },
      "strategy": "REDACT"
    },
    {
      "key_ref": null,
      "key_version": null,
      "parameters": {},
      "plugin": null,
      "preserve_format": false,
      "preserve_linkage": false,
      "preserve_nulls": true,
      "rule_id": "FALLBACK_SENSITIVE",
      "selector": {
        "column_pattern": null,
        "schema_pattern": null,
        "sensitivity_class": "SENSITIVE",
        "table_pattern": null
      },
      "strategy": "REDACT"
    }
  ],
  "unmatched_sensitive_is_error": true
}