Data protection classes
In 2012, the DIN Standards Committee introduced DIN 66399, defining requirements for data destruction across various media. The standard includes three data protection classes:
Protection class 1 – Standard Security for Internal Data
A data leak would have a negative, but limited, impact on the individual and company. There is still a need to keep personal data safe to avoid causing any issues for the people involved, though the risk is relatively limited.
Protection class 2 – High Security for Confidential Data
If this data leaks, it could seriously harm the company and even break some laws. Organisations need to be extra careful with this data, fulfilling strict requirements. The financial and personal risk for the people affected would be considerable.
Protection class 3 – Top Security for Highly Confidential and Secret Data
A data leak in this category could have catastrophic consequences, threatening an organisations survival and violating contracts and laws. Personal data security must be maintained, because leaks could put people’s health, safety, or personal freedom at risk.