Policies & Docs

Data Classification

Data categories, handling rules and reclassification.

Maintain data types and their classification, handling rules, retention and ownership. Route increases in classification through a recorded approval step.

What you can do

Maintain classification records

Create or edit a data type with its classification level, handling rules, retention, owner, systems and encryption requirement.

Review upward reclassification

Propose a higher classification level for approval. A different permitted user can approve the pending proposal; lower or unchanged levels apply immediately.

Review levels and pending work

View records grouped by classification level, see pending reclassifications and recorded encryption requirements, and export the register.

Who uses it

  • Data owners
  • Information-security and governance teams

Things to know

  • Approval requires the appropriate module permission; advisory approver-role metadata does not define an additional enforced role restriction. The encryption requirement is recorded metadata, not evidence that encryption is enabled.