Built-in Taxonomies Overview
Netwrix Data Classification comes with eight taxonomies with hundreds of classification rules out-of-the-box.
The four core taxonomies cover a broad range of sensitive personal, financial, and health-related information. The remaining four taxonomies derive from the core set. They are tailored to meet the requirements of specific data protection regulations:
- Personally identifiable information covering GDPR scope.
- Medical records covering HIPAA scope.
- Financial records and payment cards information covering GLBA and PCI DSS scope.
This section contains the full list of built-in taxonomies supported by Netwrix Data Classification.
NOTE: Netwrix Data Classification users can see only the taxonomies they have permissions to use. See the User Management section for more information on users' permissions.
Core Taxonomies

- ABA routing numbers
- IBAN/SWIFT codes
- Bank account numbers

- Personal information (full name, home address, date of birth) in the following languages:
- Danish
- Dutch
- English
- French
- German
- Greek
- Icelandic
- Italian
- Slovenian
- Spanish
- Swedish
- National IDs, passport numbers, driver licenses, taxpayer IDs, etc. for the following countries (coverage varies):
- Australia
- Belgium
- Brazil
- Bulgaria
- Canada
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Estonia
- Finland
- France
- Germany
- Greece
- Hong Kong
- Hungary
- Iceland
- India
- Ireland
- Italy
- Latvia
Lithuania
- Luxemburg
- Malta
- Netherlands
- Norway
- Poland
- Portugal
- Romania
- Russia
- Singapore
- Slovakia
- Slovenia
- South Africa
- Spain
- Sweden
- United Kingdom
- USA

Cardholder data (holder name, card number, expiration and security code) for the major payment systems:
- American Express
- Diners Club
- Discover
- JCB
- Mastercard
- UnionPay
- Visa

Medical forms, treatment records, prescription drugs, decease names/codes, allergies, social and insurance numbers.
Derived Taxonomies

A subset of the PII taxonomy relating to the personal information of EU residents:
- Austria
- Belgium
- Bulgaria
- Croatis
-
Czech Republic
- Denmark
-
Estonia
- Finland
- France
- Germany
-
Greece
- Hungary
-
Ireland
- Italy
-
Latvia
- Lithuania
-
Luxemburg
- Malta
- Netherlands
-
Poland
- Portugal
-
Romania
- Russia
-
Slovakia
- Slovenia
- Spain
- Sweden
- United Kingdom
- Austria
- Belgium
- Bulgaria
- Croatis
-
Czech Republic
- Denmark
-
Estonia
- Finland
- France
- Germany
-
Greece
- Hungary
-
Ireland
- Italy
-
Latvia
- Lithuania
-
Luxemburg
- Malta
- Netherlands
-
Poland
- Portugal
-
Romania
- Russia
-
Slovakia
- Slovenia
- Spain
- Sweden
- United Kingdom

Personal data (same as in PII) accompanied by the following special categories of personal information (GDPR Article 9):
- Ethnicity
- Political views
- Religious beliefs

Combines the Financial Records, PCI DSS and PII (US social security numbers) taxonomies.

Combines the PHI and PII (US social security numbers) taxonomies.