Sensitive data is always classified.

FALSE. Sensitive data is NOT always classified.

Sensitive information is data that must be protected from unauthorized access to safeguard the privacy or security of an individual or organization.

There are three main types of sensitive information:

1. Personal information

2. Business information

3. Classified information

Data is "Classified" based on the damage that might result from unauthorized disclosure. Some data is Sensitive, but will not necessarily do harm to the country if released publicly - such as PII- which could do harm to individuals if released but not necessarily the country.