What describes the purpose of data handling requirements in data classification?

• A. They guide protection and handling requirements based on sensitivity and impact
• B. They specify only where data is stored
• C. They determine personnel salaries
• D. They set network bandwidth limits

Answer: (A)

The main idea is that data handling requirements are used to apply the right protections to data based on how sensitive it is and the potential impact if it were exposed or mishandled. By classifying data, you set levels that determine what needs to be done—how data is stored, who may access it, how it’s transmitted, how it’s backed up, how long it’s kept, and how it’s disposed of. This helps ensure that more sensitive information gets stronger safeguards (like encryption and strict access controls) and less sensitive data gets appropriate, proportional protection. It isn’t just about where data sits, or unrelated things like salaries or bandwidth—it's about tailoring safeguards to the risk level of the data.