After data asset policies are configured to apply labels,
Data Security
regularly scans files (folders cannot be labeled) and attempts to apply the
label. A label is only applied if both the following criterion are met:
- The number of labels on the file should be less than the maximum number
of manual labels permitted by Google (typically 5).
- If the file is already set to a different value from the same Badged
label, then the value will be applied only if it is a higher priority
label.
For example, a label named
Confidentiality has the
following values (from highest priority to lowest):
- Top Secret
- Confidential
- Internal
- Public
For a file with the Confidentiality label set to a value
of Confidential, a policy that tries to apply Internal will notice
that this is a priority downgrade, and so, will not change the value so as to
keep the data secure. However, a policy that tries to apply Top Secret
will be successful since the change is to a higher priority value. Additionally,
a policy that tries to set a different label altogether (for example,
Department) will not have any priority conflicts and
so, will be applied successfully as long as the maximum labels limit has not
been reached.
