{"id":1099,"date":"2018-05-23T16:00:55","date_gmt":"2018-05-23T16:00:55","guid":{"rendered":"https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/?p=82761"},"modified":"2018-05-23T16:00:55","modified_gmt":"2018-05-23T16:00:55","slug":"data-classification-and-protection-now-available-for-structured-data-in-sql","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/data-classification-and-protection-now-available-for-structured-data-in-sql\/","title":{"rendered":"Data classification and protection now available for structured data in SQL"},"content":{"rendered":"

This post is authored by Gilad Mittelman, Senior Program Manager, SQL Data Security.\u00a0<\/em><\/p>\n

Data privacy and data security have become one of the most prominent topics in organizations in almost every industry across the globe. New regulations that formalize requirements are emerging around these topics and compel organizations to comply.<\/p>\n

The upcoming EU Global Data Protection Regulation (GDPR), which takes effect on May 25, 2018, is one of the most noteworthy of these new regulations. It sets a new global bar for privacy rights, security, and compliance, mandating many requirements and obligations on organizations across the globe. Complying with this regulation will necessitate significant investments in data handling and data protection for a very large number of organizations.<\/p>\n

GDPR and Microsoft SQL<\/h2>\n

SQL Information Protection (SQL IP), now in public preview, complements the existing Microsoft Information Protection (MIP) unstructured data classification framework (Azure Information Protection, Microsoft 365) and extends it with new structured data classification capabilities.<\/p>\n

Microsoft SQL customers who are subject to the GDPR, whether managing cloud-based or on-premises databases or both, will need to ensure that qualifying data in their database systems is aptly handled, protected and monitored according to GDPR principles. This means that many customers will need to review or modify their database management and data handling procedures, especially focusing on the security of data processing as stipulated in the GDPR \u2013 the first step in this journey to compliance is discovering and tagging where such sensitive data resides within the database environment.<\/p>\n

SQL IP introduces advanced capabilities built into Azure SQL Database and SQL Server for discovering, classifying, labeling and protecting<\/strong> the sensitive data in your SQL databases.<\/p>\n

Discovering and classifying your most sensitive data (business, financial, healthcare, PII, etc.) can play a pivotal role in your organizational information protection stature. It can serve as infrastructure for:<\/p>\n