guide
Classification Levels
Share this doc:
01. Restricted
Restricted data could be incredibly dangerous to an individual if compromised. This class of data could be used to uniquely identify or impersonate an individual, or impersonate ownership. Restricted data also includes any information that is highly sensitive if made public, like sexual orientation, healthcare history, or political beliefs.
02. Confidential
Confidential data is data that could identify an individual when combined with other information that would be easy to find. For example, you might store GPS location data. When combined with a license plate number, suddenly a bad actor can identify an individual whose GPS location data you are storing.
03. Internal
Internal data is information that doesn't represent significant privacy risk, but still shouldn't be shared publicly, e.g., business intellectual property or expansion plans. This type of information could be shared freely inside a company and with any partners under a Non Disclosure Agreement, or NDA.
04. Public
Public data can be freely shared outside of the company, e.g., past earnings releases. This information poses no risk to individual privacy and isn't considered private from a business perspective either.
For more on this topic, take the Lab:
Data Classification Lab
In a live terminal environment, you will transform data to serve business needs while protecting customer privacy. You will segment the data into separate databases and recommend appropriate access control and retention policies.
