What is Data Classification? | UpGuard

**Executive summary:** This guidance outlines the purpose and essentials of data classification—defining data states and formats, sensitivity tiers (high/medium/low), regulatory and industry considerations, and a practical process for policy creation, data discovery, categorization (content-, context-, and user-based), labeling, and implementing controls such as encryption, access control, least privilege, and monitoring to safeguard confidentiality, integrity, and availability.