Data Classification and Information Protection

 Depending on type and nature of data it can be classified into various levels. Each level needs respective protection mechanism hence its important to understand and classify data into appropriate classes. Generally its classified from class 1 to class 5: 

Class 1 (Public): Information considered public is classified as class 1 data. Example, non sensitive information in an organization available for external use. 

Class 2 (Internal): Information generally available to employees and approved non employees. Example, Unpublished intellectual property, building layouts etc...

Class 3 (Confidential): Sensitive information within an organization, intended to be used by only specified groups of employees. Example,  financial information, information protected by privacy laws etc.

Class 4 (Restricted): Information that is extremely sensitive and is intended to be used by individuals only within an organization. For example, Personally identifiable information, credit card numbers, personal health care information. 

Class 5: Information that would cause severe harm to individuals or organizations if disclosed. Class 5 data includes individually identifiable information which if disclosed would create risk of criminal liability, loss of insurance or employability, financial, social or psychological harm.