Add data-classification.md extension

rob-sessink commented 1 week ago

Provides an extension where an event source can annotate an event with information around data classification of an event and its payload. CloudEvents may contain payload which is subjected to data protection regulations like GDPR or HIPAA. For intermediaries and consumers knowing how event payload is classified enables compliant processing of an event.

Adds an extension with attributes:

dataclassification (Required). Data classification level of an event and payload within the context of a data protection regulation.
dataregulation (Optional). Applicable data protection regulation.
datacategory (Optional). Data category of the event payload within the context of data classification and data protection regulation.

duglin commented 1 week ago

Can you update the README in the "extensions" dir too?

duglin commented 3 days ago

Not an expert in this space but it LGTM with the minor edits I just commented on. Thanks for the work on this!

duglin commented 3 days ago

@rob-sessink while not 100% necessary, can you rebase this on the latest 'main' branch so that the tests will run successfully for you?

duglin commented 2 days ago

woo hoo - tests again! thanks for the rebase. still LGTM

Ping @jskeet for another look

cloudevents / spec

Add data-classification.md extension #1317