Google just added a paragraph under the “Business Description” section in the Google My Business Guidelines that reads:

Note: We do not allow content that contains private or confidential information such as personal financial information, government-issued IDs, contact information linked/associated with a name, sensitive records, images, transcripts or links that contain personal information. We also do not allow solicitation of the above information through local posts/merchant description other than user’s own name, email and phone number.

This isn’t really a new policy change since I’ve seen multiple cases where Google removes this type of information from reviews, posts, and Q&A.  Regardless, it’s always great to see them clarify and help users understand what content is against their guidelines.