Personal data typed directly into the model
"Personal data typed directly into the model" is one of the governance checks Auditabi runs on a Power BI semantic model. n table(s) contain e-mail addresses or people's names hardcoded in a DATATABLE / Enter-data step. It is a medium-severity finding: the model still works, but results are wrong in some filter contexts, slow, or fragile under change. Load user lists from a governed source (Entra ID group, HR table) with RLS, and keep them out of the model definition.
What is detected
n table(s) contain e-mail addresses or people's names hardcoded in a DATATABLE / Enter-data step. Personal data lives in the PBIP, in every copy of the model and in version control, outside any access control or retention rule.
Why it matters
Wrong in some filter contexts, slow, or fragile under change. Fix in the next iteration.
How to fix it
Load user lists from a governed source (Entra ID group, HR table) with RLS, and keep them out of the model definition.
Reference
GDPR art. 5 (data minimisation)
Does your model fail this check?
Free static audit with the exact objects, no account, nothing stored.