Glossary · D
Data classification
Data classification is the assignment of sensitivity levels to information, such as public, internal, confidential and restricted, so that handling, access and protection rules can follow the level.
Extended definition
In more detail.
Classification makes other controls possible: access rules, encryption requirements, retention, sharing restrictions and incident severity all depend on knowing what the data is. It must be simple enough that staff apply it and enforced technically where possible. Regulated categories such as CUI, protected health information and privileged legal material carry their own handling requirements that the scheme must incorporate.
In our work
Where it appears.
See data classification and access governance; the privacy counterpart is data inventory and mapping.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days