--- schema_version: "1" id: 9afdf3dcec5d1c1b45fed9ad1642201d898c2df13e2d29bacff76d545a98936c title: Act on Data Policy Scan Results collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/data_detect_scan_action.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.data_detect_scan_action.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 2f4499f1c14fd13e2930e5736859f3331d139544bf45d8881327c936b2a55d8e description: After you've reviewed the Data Detect scan policy results, use them to bolster your data security and privacy strategy, especially with specific fields that have excessively sensitive data. products: - Salesforce Platform - Cross Cloud release: "264" --- # Act on Data Policy Scan Results After you've reviewed the Data Detect scan policy results, use them to bolster your data security and privacy strategy, especially with specific fields that have excessively sensitive data. ### Required Editions
Available in: Lightning Experience
Available in: Enterprise, Performance, Unlimited, and Developer editions with the Salesforce Shield or Data Detect Licenses.
## Take Action on your Scanned Data Results After Data Detect helps you identify sensitive data, use other Salesforce Guardian products or solutions to enhance your organization’s data security. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_note.png) Note Make sure you have the correct license type for any separate products you intend to use, or contact your Salesforce representative. ## Classifying Sensitive Data Update the [data sensitivity classification](https://help.salesforce.com/s/articleView?id=xcloud.platform/help/en-us/extend_click/topics/data_classification/data_classification_intro.htm&type=5&language=en_US) and compliance categorization of fields that contain sensitive data. Apply data classification labels to fields you've identified as containing sensitive data. Examine relevant processes and procedures to identify what your team needs to know about handling sensitive data. Or help your customers understand how to manage sensitive data. ## Use Encryption to Protect Sensitive Data Using encryption protects sensitive data from unauthorized access. Revisit encryption policies for your organization by applying [Database Encryption](https://help.salesforce.com/s/articleView?id=xcloud.security_platform_encryption/security_pe_tle_set_up_database_encryption.htm&type=5&language=en_US) for your transaction database or apply [Field-Level encryption](https://help.salesforce.com/s/articleView?id=xcloud.security_platform_encryption/security_pe_set_up_field_level_encryption.htm&type=5&language=en_US) for fields with identified sensitive data. Enable Shield Platform Encryption to encrypt the sensitive fields you have identified ## Safeguarding Data If your organization needs strict data protection requirements, there are different ways of limiting access that provide an extra layer of security. - Transaction Security policies: Consider [creating or updating your transaction policies](https://help.salesforce.com/s/articleView?id=xcloud.real_time_event_monitoring/enhanced_transaction_security_cb_examples.htm&type=5&language=en_US) to handle fields with sensitive data. For example, prevent exporting fields with sensitive data from reports. This is part of Event Monitoring. - Masking : Consider masking fields with sensitive data within both Production (with [Privacy Center](https://help.salesforce.com/s/articleView?id=xcloud.data_protection_and_privacy/topics/privacy_center/about_privacy_center.htm&type=5&language=en_US)) and Sandbox environments (with [Data Mask](https://help.salesforce.com/s/articleView?id=xcloud.deploy_sandboxes/topics/data_mask_overview.htm&type=5&language=en_US)). Keep in mind that masking fields is a permanent action, so you can't restore their original values. - Access permissions : Review access controls and permissions to fields with sensitive data with the [Control Who Sees What](https://help.salesforce.com/s/articleView?id=xcloud.platform/help/en-us/access/topics/security_data_access.htm&type=5&language=en_US) Explorer in Security Center. This makes sure that users only access the data they need to do their job. - If it’s no longer needed, delete identified sensitive data from the record. ## Audit Changes to Sensitive Data Auditing helps maintain a comprehensive historical record of field changes and establishes data integrity and compliance with industry standards. Regularly monitor [Setup Audit Trail](https://help.salesforce.com/s/articleView?id=xcloud.setup/topics/admin_monitorsetup.htm&type=5&language=en_US) for any setup or key encryption. Revisit the field history retention for fields with frequent instances of sensitive data with [Field Audit Trail](https://help.salesforce.com/s/articleView?id=xcloud.setup/field_audit_trail.htm&type=5&language=en_US). Set up Field Audit Trail to track changes to these sensitive fields. ## Event Monitoring [Event Monitoring](https://help.salesforce.com/s/articleView?id=xcloud.setup/real_time_event_monitoring/real_time_event_monitoring_overview.htm&type=5&language=en_US) supports compliance by providing detailed audit trails required by industry regulations. And it enhances security by tracking user activity, which allows for the identification of suspicious behavior like unauthorized access or data exports, thus preventing breaches.