# Data Handling Rules Template

## Purpose

Define what data categories may enter which AI systems under what conditions.

## Suggested data classes

### Public
Information already intended for public use.

### Internal
Routine internal information not approved for public release.

### Confidential
Sensitive business information that should be restricted internally.

### Restricted
Information whose misuse could cause significant harm, regulatory exposure, contractual breach, or customer impact.

## Basic rule model

- public data: may be used in approved tools
- internal data: may be used in approved tools only when business need exists
- confidential data: restricted to explicitly approved environments and use cases
- restricted data: prohibited unless specifically authorized and technically controlled