Could part of the incremental approach referenced also be based on priority of getting the data labeled? Maybe this isn’t the correct example, but would one possible approach be to label restricted/very restricted data first, as it requires additional protections?

Existing Wording:

#implementation - In other words, instead of an all-or-nothing approach, we can take a more gradual approach to implementing security labeling.