Field data classification for compliance policies
Key Takeaway
Set Compliance Categorization on a field to record which regulations, such as GDPR or HIPAA, apply to its data. Set Data Sensitivity Level to record how sensitive that data is.
Data classification lets you label each field with how sensitive its data is and which compliance rules apply to it, such as GDPR or HIPAA. The labels are field-level metadata that guide decisions about access, reporting, and data compliance.
The four classification fields
Data classification adds four metadata fields to most standard and custom object fields. Each one records a different fact about the field's data.
| Field | What it records |
|---|---|
| Data Owner | The person or group associated with the field |
| Field Usage | Whether the field is still in use |
| Data Sensitivity Level | How sensitive the data is |
| Compliance Categorization | Which regulations apply to the data |
The data owner understands why the field's data matters to the company. The data owner might also be responsible for setting the field's minimum data sensitivity level.