You can use the predefined classifications to describe the sensitivity of the data.

You can find the following predefined classification artifacts in the [uncategorized] category:

Confidential

Confidential data is data that if compromised in some form, is likely to result in significant or long-term harm to the institution or individuals whose data it is.

Personal information (PI)

Personal information (PI) is defined as any data relating to an identified or identifiable individual. PI includes both identifiers, such as someone's name or employee serial number, as well as any personal information that can be reasonably associated with an individual, such as age, profession, preferences, net worth or mobile device location.

Personally identifiable information (PII)

Personally identifiable information (PII) is defined as any data that could potentially identify a specific individual. Any information that can be used to distinguish one person from another can be considered PII.

Sensitive personal information (SPI)

Sensitive personal data is defined as personal data consisting of information relating to an individual with regard to racial or ethnic origin; political opinions; religious beliefs or other beliefs of a similar nature; trade union membership; physical or mental health or condition; sexual life; or any criminal or alleged criminal history of a person.

You can also create your own classifications. See Designing classifications.