Data Sensitivity
Explicit sensitivity scoring (for example confidential, restricted) with handling instructions, allowed recipients, and encryption requirements for storage and transit.
A prioritized data set register reduces risk, focuses engineering and compliance effort, and clarifies stewardship responsibilities so scarce resources target the most business-critical or regulated data assets.
Data governance, data engineering, privacy officers, and business unit owners commonly collaborate to draft and approve dataset priorities.
Data Stewards are responsible for dataset accuracy, catalog metadata, and day-to-day access requests. They approve classification changes and confirm business use cases prior to publication.
The Chief Privacy Officer reviews regulated data designations and retention rules, ensures legal obligations (HIPAA, FERPA, GLBA) are reflected, and signs off on compliance controls.
They prioritized tenant leases and payment histories for automated processing and compliance
Clinical patient records and consent forms were marked highest priority and given encrypted storage and access controls
Explicit numeric or tiered priority indicating remediation order, resource allocation, and expected SLA so teams can sequence work and set realistic timelines.
Named steward and backup with contact details and responsibilities so access requests and incident responses route to accountable personnel without delay.
Regulatory and contractual flags (HIPAA, FERPA, PCI, GLBA) plus retention directives to ensure legal obligations are visible and enforceable.
Source system, schema reference, current quality score, and downstream consumers to inform engineering estimates and test plans for changes.
Collect metadata and assign provisional owner.
Business and compliance weigh impact and risk.
Engineering estimates and change window scheduled.
Policies applied and automated checks enabled.
Quarterly reviews recommended for priority refresh.
Regulated data incident notifications often require prompt action.
Retention periods typically begin at creation or last modification.
Ensure records and evidence are accessible for audits within required windows.
Schedule archival or deletion following retention rules.
Explicit sensitivity scoring (for example confidential, restricted) with handling instructions, allowed recipients, and encryption requirements for storage and transit.
Systems engineer or team responsible for schema changes, ingestion pipelines, and operational fixes tied to the dataset.
Short description of consequences if data is unavailable or incorrect, including revenue or regulatory risk estimates where available.
Procedure for granting and revoking access, approval matrix, and minimum authentication requirements for recipients.
Baseline data quality indicators (completeness, accuracy, freshness) and remediation targets for prioritized work.
Record of schema changes, owner sign-offs, and migration notes to support audits and rollbacks.
Ensure the platform you use supports secure storage, audit trails, and access controls compatible with your policies.
| Field | Configuration |
|---|---|
| Authentication Method | Email link | SMS code | SSO |
| Approval Order | Sequential or parallel routing |
| Audit Capture | IP, timestamp, action log |
| Retention Setting | Automated archival after retention period |
| Criteria | Electronic Signature | Digital Signature |
|---|---|---|
| Legal Definition | broad category | pki-based subset |
| Cryptographic Basis | not required | required |
| Non-repudiation Strength | moderate | high |
| Common Use Cases | approvals, consents | high-assurance regulatory filings |
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Trial varies | Trial varies | Trial varies | Trial varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |