Data Classification

Classify data elements by sensitivity tier and define handling requirements.

1|1|Updated Feb 21, 2026
One-click install
npx skills add https://github.com/dtsong/claude-code-windows-setup --skill data-classification-dtsong
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Data Classification
Source: https://github.com/dtsong/claude-code-windows-setup/tree/main/skills/council/guardian/data-classification
Command: npx skills add https://github.com/dtsong/claude-code-windows-setup --skill data-classification-dtsong

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you identify and categorize data based on its sensitivity, ensuring appropriate handling and protection measures are applied throughout its lifecycle.

Core Features & Use Cases

  • Data Sensitivity Tiers: Classifies data into Public, Internal, Confidential, and Restricted.
  • Handling Requirements: Defines specific security controls (access, encryption, masking) for each tier.
  • PII Flow Mapping: Traces the journey of Personally Identifiable Information (PII) across systems.
  • Use Case: A company needs to ensure compliance with GDPR. This Skill helps them identify all PII, classify it as 'Restricted', and define strict encryption and access controls for its storage and transit.

Quick Start

Use the data classification skill to classify the data element 'customer_email' as Confidential and define its handling requirements.

Frequently Asked Questions about Data Classification

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I classify data by sensitivity tier for GDPR compliance?

Data classification categorizes elements into Public, Internal, Confidential, and Restricted tiers to ensure GDPR compliance by applying appropriate encryption, access controls, and handling requirements.

What are the handling requirements for restricted PII during storage and transit?

Handling requirements for restricted PII mandate strict access controls, encryption, and masking policies to protect data across collection, transit, processing, storage, sharing, and deletion lifecycle stages.

How does PII flow mapping trace data across different processing stages?

PII flow mapping traces the journey of personally identifiable information across collection, transit, processing, storage, sharing, and deletion stages to identify cross-boundary transfers and specify technical controls.

Can I use data classification to define retention policies for confidential data?

Yes, data classification defines retention policies alongside access control, encryption, and masking requirements to ensure confidential data is handled securely throughout its lifecycle.

Does data sensitivity classification specify technical controls for encryption and masking?

Data sensitivity classification specifies technical controls for encryption and masking based on assigned tiers, ensuring restricted and confidential data receive appropriate protection measures during processing and sharing.