Data Classification Policy and Procedures

Create a data classification policy for [organization type] in [industry]. Data types include [PII, financial, health, intellectual property, operational]. Stakeholders include [departments handling sensitive data]. Current state is [no classification, informal, partial implementation]. Regulatory requirements include [GDPR, HIPAA, PCI-DSS, industry-specific].