How to block PHI / PII Upload to a specific Sharepoint site

Question

We manage sharepoint for a health care organization and allow the upload of PHI as Sharepoint is HIPAA compliant, but have recently created a new sharepoint site that we don't want protected health information uploaded to. Is there a way we can block the upload of files containing PHI or PII for just this one site?

Answer 1

Hi @Hunter Nance,

There are currently no known types of files that cannot be uploaded into SharePoint. And there is no OOTB way to restrict specific file types in the SharePoint Online.

As a workaround, you could create a flow which auto-runs on each file uploaded and if it matches the given specific file types(PHI,.PII in your case), auto-delete that document and send email to the author who uploaded it.

Compose 2 inputs：

last(split(triggerOutputs()?['body/{FilenameWithExtension}'],'.'))

Reference flow:

https://learn.microsoft.com/en-us/answers/questions/1061411/restrict-file-type(-exe-dll-files)-upload-to-docum

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.