Comment Now: Draft Guidelines on Data Classification Practices
The NCCoE has released guidelines for data classification practices based on collaboration with industry to demonstrate practical approaches for data classification using commercially available technology.
Published as NIST Special Publication (SP) 1800-39, Data Classification Practices, these guidelines show how organizations can use data classification tools to discover, identify, and label sensitive unstructured data. The public comment period for this publication is open through March 30, 2026.
Protecting sensitive data, such as personal information like social security numbers and biometric data, requires organizations to understand where its sensitive data resides. Organizations’ sensitive data may be unstructured, and can be found in various systems, including data lakes, file repositories, and emails. Since data is so vast and ubiquitous, organizations need a shared understanding of what data assets are to identify and protect them.
This publication demonstrates how organizations can apply data classification practices to discover, identify, and label sensitive...
Copyright of this story solely belongs to nist.gov. To see the full text click HERE
