data-classification-and-handling

To classify datasets containing PII, apply a four-tier scheme—public, internal, confidential, restricted—and enforce safe handling through defined storage, access controls, retention bounds, and immutable audit logging.

Remediate PII leakage in debug logs and metrics by reclassifying the exposed data as restricted, then applying leak-path mitigation across logs, retention policies, access controls, and auditability to prevent future exposure.

Set retention policies and access controls for sensitive customer data by assigning the correct data classification tier, then defining least-privilege authorization, field-level access, and deletion-on-request procedures.

You need data classification for dataset onboarding and PR reviews when introducing new sensitive fields, ensuring correct storage, access models, retention, and audit logging are applied before data enters production.

Data classification helps with cross-border PII handling and deletion requests by enforcing purpose limitation, minimization, and field-level access rules, ensuring compliance with varying regional data protection requirements.

For restricted data tiers, you must log immutable audit fields covering access events, authorization changes, retention enforcement, and leak-path discovery to maintain strict security governance and accountability.