← Back to glossary
🏷️

Data Classification

Data Management

Data Retention Principle of Least Privilege (PoLP) Access Control Information Governance

Process of categorizing data to drive security controls, handling, and retention.

Definition

Data classification assigns categories (public, internal, confidential, restricted) based on sensitivity and impact. Controls (encryption, access restrictions) and retention rules follow the classification.

In plain English Process of categorizing data to drive security controls, handling, and retention.

Why this matters

Why it matters: Misclassified data leads to over-sharing or under-protection, increasing breach and compliance risk.

Example

Example: Restrict “restricted” datasets, enforce encryption, and log all access to sensitive categories.