Tietotason

Tietotason is a Finnish term used in information management to denote the level of sensitivity or protection required for a piece of information. It encompasses both the potential impact of disclosure or loss and the applicable handling rules, such as access restrictions, storage, transmission, and retention. In practice, tietotaso informs how data should be processed and protected throughout its lifecycle and helps organizations implement consistent security and privacy measures.

The exact definition and labels of tietotaso vary by organization, sector, and country-specific regulations. There is no single universal standard; instead, organizations typically define a tiering scheme that aligns with their risk management, legal requirements, and technical capabilities. Common levels include public or unclassified, internal use, confidential, restricted, and, in stricter regimes, highly confidential or top secret.

Emanating from information security and data governance practices, tietotaso is closely related to access control, encryption, data minimization, and auditability. It supports decisions on who may access data, how it can be shared, where it can be stored, and for how long it must be retained. In public administration and regulated industries, clearly defined tietotaso categories help meet transparency obligations while protecting sensitive information.

See also: information classification, data governance, information security, privacy regulations.