# Data classification Data classification is the process of organizing data into categories that make it easier to retrieve, sort, store for future use, and secure. It is fundamental to effective information management, data management, and security strategies. Data classification involves assigning metadata tags or labels to data based on its type, sensitivity, and criticality. ## Sensitivity/Confidentiality classification A popular way to classify information and data is to assign it a sensitivity/confidentiality level, and associated rules: - Public: All - Unrestricted: Organization members - Restricted: Right to know (i.e., legitimate interest) - Confidential: Need to know - Secret: Strictly limited to organization members who need the information to perform their duties Remarks: - When information/data is combined, it may be assigned a higher sensitivity/confidentiality level than the individual pieces - At a minimum, a set of information/data must be assigned the lowest sensitivity/confidentiality level among the regrouped pieces