When handling medical records, payment data, or materials subject to retention contracts, you should not rely solely on a local regex script but should use an approved DLP process.