Generalv1.0.0

data-classification

Analyze database migrations to add data classification to new data types.

by Felipe CoeView on GitHub ↗
data-classificationclassificationdatabase-migrationdatabasemigration

Data Classification Plugin

Automatically adds data classification comments to all database migrations with new or changed columns.

Installation

claude plugin install data-classification@personio-claude-code-marketplace

What does this plugin do?

This plugin ensures that every database migration that adds or changes columns includes the required COMMENT SQL statement with proper data classification according to Personio's security and compliance rules. It prevents you from accidentally committing migrations without the necessary classification metadata.

The plugin provides Claude with comprehensive knowledge of Personio's data classification framework, including:

  • Four classification levels (C-1 Public through C-4 Restricted)
  • 40+ data categories (from PERSONAL_DATA to WHISTLEBLOWING_SENSITIVE)
  • Clear rules for determining which classification and category to apply

The full data classification guide can be found at https://pzip.to/class

Data Classification Agent

The data-classification agent automatically reviews and enhances database migrations with proper data classification comments.

What you need:

  • Database migration files that add or change column schemas
  • Basic understanding of what type of data your columns will store

Quick Start:

# When writing or reviewing a database migration
claude "Review this migration and add data classification comments"

Example:

Let's say you're adding a new column to store employee email addresses. Without this plugin, you might write:

ALTER TABLE employees
ADD COLUMN work_email VARCHAR(255);

With the data-classification agent active, Claude will automatically enhance this to:

ALTER TABLE employees
ADD COLUMN work_email VARCHAR(255)
COMMENT 'C-3 Confidential;PERSONAL_DATA';

The agent understands that:

  • Email addresses are personal data under GDPR → Classification C-3 Confidential
  • This is standard personal data → Category PERSONAL_DATA

For a more sensitive example, if you're adding a column for salary information:

ALTER TABLE compensation
ADD COLUMN annual_salary DECIMAL(10,2)
COMMENT 'C-4 Restricted;PERSONAL_DATA_MONEY';

The agent knows that salary information:

  • Indicates how much money a person receives → Classification C-4 Restricted
  • Is specifically monetary personal data → Category PERSONAL_DATA_MONEY

Why would you want this?

  • Compliance guarantee: Never commit a migration without required data classification comments
  • Security by default: Ensures sensitive data is properly tagged from day one
  • Knowledge transfer: Learn Personio's classification framework while you work
  • Audit readiness: All database changes automatically meet compliance requirements
  • Time savings: No need to manually look up classification rules or category definitions
  • Prevent mistakes: Catches incorrect classifications before they reach production

The agent has comprehensive knowledge of all 40+ categories and knows exactly when to apply C-1 Public, C-2 Internal, C-3 Confidential, or C-4 Restricted classifications based on GDPR requirements and Personio's security policies.