What is Sensitivity Labels?
Sensitivity Labels is a data classification mechanism that attaches persistent, human-readable tags to documents, emails, and other files to indicate how sensitive the content is. These tags drive protection policies such as encryption, access restrictions, and sharing controls that follow the file wherever it travels.
What it is
A sensitivity label is a tag applied to a piece of content, such as a Word document, a PDF, or an email, that declares its classification level. Common label names include Public, Internal, Confidential, and Highly Confidential. The label travels with the file as metadata. When a policy engine reads the label, it can enforce rules automatically: encrypt the file, block external sharing, apply a watermark, or prevent printing.
Labels are distinct from the underlying protection action. The label is the declaration. The policy is what acts on that declaration.
Why it matters
Without labels, protection policies must guess what data is sensitive based on content scanning alone. Labels make the classification explicit and persistent. A file labeled Confidential stays Confidential when it is emailed, uploaded to cloud storage, or copied to a USB drive, as long as the enforcement layer reads the label.
Labels also create a shared vocabulary across an organization. Legal, finance, and engineering teams can agree that "Restricted" means a specific set of controls, and every tool in the stack can act on that agreement consistently.
How tools address it
Data classification tools in the Data Classification category help organizations discover unclassified content and apply labels at scale. Some tools scan file shares and databases to find sensitive data types such as PII, then recommend or auto-apply labels. Others integrate directly into productivity suites so users can label content at creation time.
Once labels are applied, adjacent categories take over:
- Data Loss Prevention (DLP) tools read labels to decide whether to block a transfer.
- Data Access Governance tools use labels to enforce who can open or edit a file.
- Encryption tools apply cryptographic protection based on label level.