Skip to main content

Getting Started with PII Protection

This section guides Jira and Confluence Cloud administrators through installing PII Protection and setting up your first data protection checks.

Installation from the Atlassian Marketplace​

PII Protection is readily available on the Atlassian Marketplace. Follow these steps to install it within your Jira Cloud and/or Confluence Cloud instances:

  1. Log in as an Administrator
    • Sign in to your Jira Cloud and/or Confluence Cloud account with administrator privileges.
  2. Navigate to the Atlassian Marketplace
    • In Jira: Click on the Apps menu and select Find new apps.
    • In Confluence: Click on the Settings (gear) icon and select Find new apps in the Atlassian Marketplace section on the sidebar.
  3. Locate PII Protection
    • Search for PII Protection in the Marketplace search bar.
    • Select the appropriate listing for PII Protection for Jira or PII Protection for Confluence.
  4. Install the App
    • Click the Try it free button.
    • Follow the on-screen prompts to authorize and complete the installation within your Jira and/or Confluence instance(s).

Creating Your First Check Group​

A Check Group is a fundamental building block for configuring PII Protection. It acts as a container that holds a collection of related data protection checks, allowing you to group them logically and apply consistent settings across Jira projects or Confluence spaces.

  1. Access PII Protection Settings
    • In Jira: Navigate to Jira Administration > Apps > PII Protection.
    • In Confluence: Navigate to Confluence Administration > Apps > PII Protection.
  2. Create a New Check Group
    • Click on the Check Groups tab.
    • Select New Check Group.
    • Provide a descriptive name (e.g., "Sensitive Data Checks," "Financial Data Protection").

Defining Your Data Scan Rules​

Within your newly created Check Group, configure the specific data types PII Protection should scan for.

  1. Select Data Types
    • Choose from a list of predefined data types such as names, email addresses, credit card numbers, and more.
    • Platform-Specific Notes:
      • Jira: Data is scanned within issues, comments, descriptions, and custom fields.
      • Confluence: Data is scanned within pages, comments, and attachments.
  2. Add Custom Data Patterns (Optional)
    • Define custom data patterns using regular expressions to detect specific sensitive data not covered by the default list.

Setting Remediation Actions​

Determine the automated actions PII Protection should take when it detects sensitive data matching your defined rules. Available actions differ between Jira and Confluence based on platform capabilities.

  1. Choose Remediation Actions
    • Redact Detected Data:
      • Jira: Redacts data within issues or comments.
      • Confluence: Redacts data within pages.
    • Send Notifications:
      • Notify relevant stakeholders via email or in-app notifications.
    • Delete Content:
      • Jira: Delete the entire issue immediately.
      • Confluence: Delete the affected page or attachment.
    • Trigger Webhooks:
      • Jira: Trigger an Automation for Jira webhook.
      • Confluence: Trigger a webhook compatible with Confluence automation or external systems.
  2. Configure Action Settings
    • Customize the parameters for each action, such as specifying notification recipients or defining webhook URLs.

Applying Check Groups to Projects and Spaces​

Associate your configured Check Group with the Jira projects and/or Confluence spaces where you want PII Protection to actively scan and enforce data protection rules.

  1. Navigate to Check Group Settings
    • In your Check Group, locate the option to Apply to Projects (Jira) or Apply to Spaces (Confluence).
  2. Select Relevant Projects or Spaces
    • Jira:
      • Choose the desired projects from a dropdown or list.
    • Confluence:
      • Select the relevant spaces from a dropdown or list.
  3. Confirm Application
    • Ensure that the Check Group is correctly associated with the chosen projects and/or spaces, enabling PII Protection to commence data scanning and enforcement.