Rule 5 · Action: Block · Triggers: File uploaded · File downloaded · Content pasted · Content printed

PII DLP — credit card data

Condition: all content matching the predefined detector Global – Credit card number (likelihood Medium), NOT on Internal URLs. Expected block message: “The content that you are uploading/downloading/pasting/printing contains PII information.” Test data follows the dlptest.com Sample Data Library schema: every card number is Luhn-valid per brand BIN range and trips real detectors, but no value corresponds to a real card or person.

Specimen · copy sourceCopy this

Select and copy the block below. It is the source material for the paste, print, upload and download tests.

Synthetic PII · dlptest.com schemaName SSN Credit Card Number Donna Hernandez 062-19-2042 4092-9731-0122-8657 Maria Harris 530-44-6542 4688-9766-9123-8309 George Jones 443-15-8972 5542-6950-9863-3168 Christopher Thompson 060-31-6483 3462-3462-2638-8458 Donald White 086-63-1520 5308-7739-0127-8739 William Garcia 337-78-5716 4866-6357-2199-2400

First 6 rows of the Name + SSN + CCN dataset (30 rows, dlptest.com schema).

Test A · PasteBlock expected

Paste the copied specimen into the field below (or into any external page not on the internal list). Bulk text content analysis scans it before entry.

Test B · PrintBlock expected

Print this page — it contains the card numbers above, so print content analysis must block the job.

Test C · DownloadBlock expected

Download content analysis scans these files as they land on disk:

name-ssn-ccn.csv name-ssn-ccn.txt name-ccn-zip.csv
Test D · UploadBlock expected

First download a specimen file from an exempt context (or create cc.txt locally by pasting the specimen into Notepad). Then attach it here — upload content analysis scans on submission. Control case: a clean file must upload without interference.

clean-sample.txt (control)
Test E · External target (data in motion)Block expected

The POV guide's original flow uses dlptest.com directly — still a useful cross-check that the rule fires off this server too: copy a dataset, then paste or upload it at dlptest.com/https-post (or /http-post). The endpoint accepts and discards submissions; your block should trigger before anything is sent.

Pass criteria
  1. Paste, print, download and upload of card data are each blocked with the custom PII message — on this site and on dlptest.com.
  2. The same actions on Internal URLs domains (e.g. pasting into a Google Doc) are allowed.
  3. The clean control file passes all four channels.
  4. If Securely save content and Sensitive content storage are enabled, the triggering snippet is visible in Chrome log events.