#102 Privacy DataClassification fixes + keep Label-scope findings at minor
Fixed factual errors in the privacy data-classification article about platform defaults and expanded the classification taxonomy to cover organization and account identifiers. Corrected label-scope findings severity from info to minor since no analyzer enforces this rule.
- 2files
- 2AL files
- 0objects
Pull request · merged into main on 2026-07-14 by gggdttt · 2 files (+3 -3), 2 AL · fix · tier official · reviewed (checked by Opus)
What changed
- Corrected default DataClassification from SystemMetadata to ToBeClassified when omitted
- Added OrganizationIdentifiableInformation for company VAT/registration numbers
- Added AccountData for bank account numbers and IBANs
- Reclassified label-scope style findings from info to minor severity
- Label-scope is not enforced by any analyzer, so it should not be suppressed
- Behaviour changes for users or extensions.
AL objects touched
microsoft/knowledge/privacy/data-classification-required-on-pii-fields.md: modified, not in the BC? snapshotmicrosoft/skills/review/al-style-review.md: modified, not in the BC? snapshot
Context
- Systems: development
Source: metadata of a merged pull request in microsoft/BCQuality (bcquality): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).