The Immuta DSF
Deprecation notice
The Immuta DSF is a legacy and deprecated version of the new Data Security Framework. Instead of the deprecated Immuta DSF, use the Data Security Framework with the Risk Assessment Framework to categorize and classify your data. New users will only have the new frameworks and the deprecated Immuta DSF will not be available; however, current users can still use the Immuta DSF until the feature is fully removed.
The Immuta Data Security Framework (DSF) was designed by Immuta’s Legal Engineering and Research Engineering teams and is informed by data privacy regulations and security standards: GDPR, CCPA, GLBA, HIPAA, PCI, and global best practices. Tags should be reviewed by your organization's compliance team to ensure complete inventory and proper classification. Once activated, Immuta DSF will immediately work within Immuta Detect by assessing the entity tags applied by sensitive data discovery and applying the built-in rules and conditions to apply classification tags to the necessary columns. These classification tags then inform the sensitivity type of the data in the dashboards and reflect the risk levels of the columns, data sources, and queries that contain your data. The Immuta DSF is a supportive tool that accelerates data classification.
Sensitivity classification tags
These select classification tags have sensitivity metadata attached to them and are automatically applied based on the other classification tags listed below.
| Tag Name | Description | Sensitivity | Sensitivity Level |
|---|---|---|---|
| Immuta DSF . Personal | Indicates the presence of personal data of an individual. | 1 | Sensitive |
| Immuta DSF . Child | Indicates the presence of personal data of a child (i.e. a person under the age of 18). | 2 | Highly-sensitive |
| Immuta DSF . Financial | Indicates the presence of financial or bank data (e.g. a swift code, financial account number, tax-related data, transaction date, salary, account credentials, etc.). | 2 | Highly-sensitive |
| Immuta DSF . Health | Indicates the presence of an individual's health data. | 2 | Highly-sensitive |
| Immuta DSF . Sensitive Business | Indicates the presence of business data that is sensitive and highly confidential. | 2 | Highly-sensitive |
| Immuta DSF . Sensitive Personal | Indicates the presence of individual data that is sensitive to an individual, and if processed, could lead to serious harm for the individual (e.g. SSN, biometric data, child data, etc.). | 2 | Highly-sensitive |
| Immuta DSF . Account Credentials | Indicates the presence of authentication secrets, like passwords and emails or usernames when combined. | 3 | Highly-sensitive |
| Immuta DSF . Biometric Authentication | Indicates the presence of biometric data used for authentication including, facial images and fingerprints. | 3 | Highly-sensitive |
Immuta DSF classification tags
These classification tags are automatically applied based on the Immuta Discovered tags. They do not have sensitivity attached.
| Tag name | Description |
|---|---|
| Immuta DSF . Address | Indicates the presence of a physical address. |
| Immuta DSF . Affinity | Indicates the presence of an affiliation to trade unions or political parties, religious or philosophical belief, political opinions, sexual life or orientation, race, or ethnicity. |
| Immuta DSF . Affiliation | Indicates the presence of an affiliation to trade unions or political parties. |
| Immuta DSF . Age | Indicates the presence of a person's age. |
| Immuta DSF . Authentication Secret | Indicates the presence of authentication secrets including, banking pins, biometric authentication data, cryptographic keys, OTAC, OTPSeed, or passwords. |
| Immuta DSF . Bank Account Number | Indicates the presence of bank account numbers. |
| Immuta DSF . Banking PIN | Indicates the presence of a four digit bank PIN. |
| Immuta DSF . Belief | Indicates the presence of religious or philosophical beliefs. |
| Immuta DSF . Biometric | Indicates the presence of biometric or body data including, facial images, fingerprints, height (length), mass, weight, and temperature. |
| Immuta DSF . Business Identification Number | Indicates the presence of an identification number specifically for business, such as an employee ID number. |
| Immuta DSF . Business | Indicates the presence of sensitive business information. |
| Immuta DSF . City | Indicates the presence of a city. |
| Immuta DSF . Country Subdivision | Indicates the presence of a country subdivision. |
| Immuta DSF . Country | Indicates the presence of a country. |
| Immuta DSF . Credit Card Number | Indicates the presence of a credit card number. |
| Immuta DSF . Cryptocurrency Wallet | Indicates the presence of a cryptocurrency wallet (e.g. Bitcoin wallet). |
| Immuta DSF . Cryptographic Key | Indicates the presence of a string used as an encryption key. |
| Immuta DSF . Date | Indicates the presence of a date in time. |
| Immuta DSF . Device Geolocation | Indicates the presence of the coordinates of a device. |
| Immuta DSF . Device | Indicates the presence of a network address, a telephone number, or an IMEI number. |
| Immuta DSF . Direct | Indicates the presence of a direct identifier that can be uniquely associated with an individual. Examples of direct identifiers include: name, username, email, official individual identification numbers such as passport or identity card numbers, or privately issued individual identification numbers such as a student ID. |
| Immuta DSF . Domain Name | Indicates the presence of a website domain name. |
| Immuta DSF . Driver License | Indicates the presence of a driver's license. |
| Immuta DSF . Email | Indicates the presence of an email. |
| Immuta DSF . Facial Images | Indicates the presence of images of human faces. |
| Immuta DSF . Fax Number | Indicates the presence of a fax number. |
| Immuta DSF . Financial Account Authentication | Indicates the presence of authentication information required to use services of a financial institution (e.g. payment services). |
| Immuta DSF . Financial Account Number | Indicates the presence of a number associated with an account at a financial institution (e.g. bank account number, IBAN, credit card number, etc.). |
| Immuta DSF . Financial Transaction Date | Indicates the presence of a date of a financial record. |
| Immuta DSF . Fingerprints | Indicates the presence of human fingerprint data. |
| Immuta DSF . Gender | Indicates the presence of gender. |
| Immuta DSF . Genetic | Indicates the presence of genetic information about a person. |
| Immuta DSF . Geolocation | Indicates the presence of location in longitude and/or latitude coordinates. |
| Immuta DSF . Health Card Number | Indicates the presence of the number assigned to a health card (e.g. the British Columbia Health Network Number or Medicare). |
| Immuta DSF . Health Insurance Card Number | Indicates the presence of the number assigned to a health insurance card. |
| Immuta DSF . Indirect | Indicates the presence of an indirect identifier that is not uniquely associated with an individual. However this indirect identifier could become distinguishable when combined with other attributes. Examples of indirect identifiers include: age and affinity. |
| Immuta DSF . Infrastructure | Indicates the presence of business network information. |
| Immuta DSF . Internal Reference | Indicates the presence of data unique to an individual, but that cannot distinguish the individual without another direct identifier. |
| Immuta DSF . Internal User ID | Indicates the presence of a user ID specific to the company or dataset. |
| Immuta DSF . Latitude | Indicates the presence of latitude coordinates. |
| Immuta DSF . Length | Indicates the presence of measurement data in length (e.g. height). |
| Immuta DSF . License Plate | Indicates the presence of a license plate number. |
| Immuta DSF . Location | Indicates the presence of a physical location including: address, a street, a postal code, a city, country subdivision, a country, etc. |
| Immuta DSF . Longitude | Indicates the presence of longitude coordinates. |
| Immuta DSF . Mass | Indicates the presence of measurement data in mass. |
| Immuta DSF . Measurement | Indicates the presence of measurement data of a person or thing including: weight, mass, length, and temperature. |
| Immuta DSF . Medical Diagnostic Code | Indicates the presence of a diagnosis code used to treat, diagnose, and identify medical diseases or illnesses (e.g. IDC10 code). |
| Immuta DSF . Medical Record Number | Indicates the presence of an individual's medical record number. |
| Immuta DSF . Name | Indicates the presence of an individual's name. |
| Immuta DSF . Name Component | Indicates the presence of a part of an individual's name (e.g. first name, last name, title, surname, etc.). |
| Immuta DSF . Network Address | Indicates the presence of the unique, logical or physical address of a device on a network. |
| Immuta DSF . Official Individual Identifier | Indicates the presence of a unique identifier issued by a public body (e.g. driver's license). |
| Immuta DSF . Opinion | Indicates the presence of an individual's opinion. |
| Immuta DSF . Orientation | Indicates the presence of an individual's gender, sex life, or sexual orientation. |
| Immuta DSF . OTAC | Indicates the presence of a one-time authentication code (OTAC) used for authentication. |
| Immuta DSF . OTPSeed | Indicates the presence of a secret key of a one-time passcode (OTP seed) used for authentication. |
| Immuta DSF . Passport Number | Indicates the presence of a passport number. |
| Immuta DSF . Password | Indicates the presence of a password used for authentication. |
| Immuta DSF . Payment Amount | Indicates the presence of an amount of money used for payment. |
| Immuta DSF . Personal Device | Indicates the presence of an identifier of a personal device (e.g. cell phone). |
| Immuta DSF . Personal Identifier | Indicates the presence of a direct or indirect identifier. |
| Immuta DSF . Personal Location | Indicates the presence of a location of a specific individual. |
| Immuta DSF . Personal Tax | Indicates the presence of tax-related numbers used to identify or reference individuals (e.g. tax file number). |
| Immuta DSF . Personal | Indicates the presence of personal data of an individual. |
| Immuta DSF . Philosophical Belief | Indicates the presence of an individual's philosophical belief. |
| Immuta DSF . Political Opinion | Indicates the presence of an individual's political opinion. |
| Immuta DSF . Political Party | Indicates the presence of a political party. |
| Immuta DSF . Postal Code | Indicates the presence of a U.S. zip code. |
| Immuta DSF . Potential Direct | Indicates the presence of a potential direct identifier that is unique to an individual but not direct unless it is associated with the individual (e.g. credit card numbers). |
| Immuta DSF . Potential Indirect | Indicates the presence of a potential indirect identifier that could distinguish an individual with other information (e.g. age). |
| Immuta DSF . Precise Device Geolocation | Indicates the presence of the precise coordinates of a device. |
| Immuta DSF . Precise Geolocation | Indicates the presence of a highly specific geolocation, which could require extra controls if attributed to an individual. |
| Immuta DSF . Precise Latitude | Indicates the presence of a highly specific latitude, which could require extra controls if attributed to an individual. |
| Immuta DSF . Precise Longitude | Indicates the presence of a highly specific longitude, which could require extra controls if attributed to an individual. |
| Immuta DSF . Prescriber Number | Indicates the presence of a medical provider's identification number. |
| Immuta DSF . Privately Issued Individual Identifier | Indicates the presence of an individual identifier assigned by a private institution (e.g. student ID number). |
| Immuta DSF . Race Or Ethnicity | Indicates the presence of race or ethnicity. |
| Immuta DSF . Religious Belief | Indicates the presence of religious belief. |
| Immuta DSF . Salary | Indicates the presence of an individual's salary. |
| Immuta DSF . Sex Life | Indicates the presence of data about sex life. |
| Immuta DSF . Sexual Orientation | Indicates the presence of data about sexual orientation. |
| Immuta DSF . State Identification Card | Indicates the presence of a state-issued identification card number. |
| Immuta DSF . Street | Indicates the presence of a street address. |
| Immuta DSF . Telephone Number | Indicates the presence of a telephone number. |
| Immuta DSF . Temperature | Indicates the presence of a temperature measurement. |
| Immuta DSF . Trade Secret | Indicates the presence of a business trade secret. |
| Immuta DSF . Trade Union Membership | Indicates the presence of trade union membership. |
| Immuta DSF . URL | Indicates the presence of a website URL. |
| Immuta DSF . Username | Indicates the presence of a username. |
| Immuta DSF . Vehicle | Indicates the presence of vehicle information including: license plate number, vehicle identification number, or vehicle serial number. |
| Immuta DSF . Weight | Indicates the presence of a weight measurement. |
About Immuta's frameworks
Organizations are responsible for making their own independent assessment of the framework rules. The framework rules are only templates and are not necessarily adapted to the specific context in which an organization operates. Framework rules do not constitute legal advice. They do not create any commitments or assurances from Immuta that users will necessarily comply with the statutes or standards that have informed these framework rules.