What's in an effective Aus TFN policy?

Hello,
I am running an Australian tax file number detection policy for Endpoint and Network.  It's currently doing too good of a job or stops completely.

The data identifier was a custom checksum before our upgrade to v.14 and I have since changed it to the built-in Symantec checksum instead hoping the incidents would quieten down and become more accurate.

A TFN is 8 or 9 numbers and we must exclude mobile numbers, australian business numbers, australian company numbers and other numbers that always seem to trigger false positives.

Is anyone able to share an export of their policy please? How do you add exclusions?

Thanks

Dan