User-based classification-involves classifying files according to a manual judgement of a knowledgeable user.Context-based classification-involves classifying files based on meta data like the application that created the file (for example, accounting software), the person who created the document (for example, finance staff), or the location in which files were authored or modified (for example, finance or legal department buildings).

Content-based classification-involves reviewing files and documents, and classifying them.

Types of Data Classificationĭata classification can be performed based on content, context, or user selections: Solution Spotlight: Enable Data Discovery and Classification. If a database, file, or other data resource includes data that can be classified at two different levels, it’s best to classify all the data at the higher level. Since the high, medium, and low labels are somewhat generic, a best practice is to use labels for each sensitivity level that make sense for your organization.

Low sensitivity data-intended for public use.

For example, emails and documents with no confidential data.

Medium sensitivity data-intended for internal use only, but if compromised or destroyed, would not have a catastrophic impact on the organization or individuals.

For example, financial records, intellectual property, authentication data.

High sensitivity data-if compromised or destroyed in an unauthorized transaction, would have a catastrophic impact on the organization or individuals.

Data Sensitivity Levelsĭata is classified according to its sensitivity level-high, medium, or low. Data classification also helps an organization comply with relevant industry-specific regulatory mandates such as SOX, HIPAA, PCI DSS, and GDPR.īlog: Top Challenges to Implementing Data Privacy: Nailing Down Discovery and Classification First is Key.

It helps an organization understand the value of its data, determine whether the data is at risk, and implement controls to mitigate risks. Data classification tags data according to its type, sensitivity, and value to the organization if altered, stolen, or destroyed.

What is dropbox oem