You are here:
Sensitive Data Classification in Data 360
Classifying data helps ensure it’s handled appropriately, securely, and in line with regulatory or internal standards. You can classify data by considering both its sensitivity (how confidential it is) and its usage (how and by whom it’s accessed or used).
Classify Data Based on Sensitivity
To classify data by sensitivity, start by figuring out how much damage can happen if the data were shared, used incorrectly, or lost. You can group data into four sensitivity levels.
- Public: This data poses no risk if shared openly. Examples include product brochures and published reports.
- Internal: Company data that can include team lists or internal rules. It isn't harmful if it’s leaked, but it isn't meant for the public to see.
- Confidential: This data can include customer records or internal financials. If exposed, it causes significant harm and requires stronger controls.
- Restricted or Highly Sensitive: This data contains personal health information, credit card numbers, or trade secrets and demands the most stringent protections due to legal or business risk.
Refer to regulatory frameworks like General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPAA), or (Payment Card Industry Data Security Standard) PCI-DSS to define and guide your sensitivity classifications.
Classify Data Based on Usage
To classify data by usage, review who uses the data, how often, and why. For example, data for company-wide reports is different from data used in transactional systems or for customer service. Consider if the data is actively used, archived, or can be deleted. Organizing data helps you set the right security rules, like who can access it and for how long, ensuring it's managed properly based on its purpose.
- Classification Tags in Data 360
Classifications provide additional context and meaning within a taxonomy. They allow you to categorize data based on predefined criteria such as sensitivity or intended use, making it easier to manage, protect, and use data appropriately. - Create a Classification in Data 360
In Data 360, define sensitivity or usage levels to categorize data and drive governance policies such as masking and access control. - Edit or Delete a Classification in Data 360
Edit the name and description of a classification, manage its associated tags, or delete it if no longer needed. You can't delete classifications that are used in policies. This includes default classifications provided by Data 360.
