diff --git a/proto/mediums/BUILD b/proto/mediums/BUILD
index af3c5fd7..cf6d1081 100644
--- a/proto/mediums/BUILD
+++ b/proto/mediums/BUILD
@@ -21,6 +21,7 @@ proto_library(
     srcs = [
         "nfc_frames.proto",
     ],
+    deps = ["//storage/datapol/annotations/proto:datapol_annotations"],  # copybara:strip(datapol)
 )
 
 java_lite_proto_library(
diff --git a/proto/mediums/nfc_frames.proto b/proto/mediums/nfc_frames.proto
index 8dcf0183..0389f6d2 100644
--- a/proto/mediums/nfc_frames.proto
+++ b/proto/mediums/nfc_frames.proto
@@ -16,6 +16,9 @@ syntax = "proto2";
 
 package location.nearby.mediums;
 
+import "storage/datapol/annotations/proto/semantic_annotations.proto"; // copybara:strip(datapol)
+
+option (datapol.file_vetting_status) = "latest";  // copybara:strip(datapol)
 option optimize_for = LITE_RUNTIME;
 option java_outer_classname = "NfcFramesProto";
 option java_package = "com.google.location.nearby.mediums.proto";
@@ -27,7 +30,8 @@ message AdvertisementData {
   optional bytes tag = 1;
 
   // A public key associated with the advertisement.
-  optional bytes public_key = 2;
+  optional bytes public_key = 2 /* copybara:strip_begin */
+      [(datapol.semantic_type) = ST_SECURITY_KEY] /* copybara:strip_end */;
 }
 
 // The data to be sent to advertisers from scanning device during discovery.
@@ -39,5 +43,6 @@ message AdvertisementRequest {
   optional string endpoint_id = 2;
 
   // Public key from the scanning device.
-  optional bytes public_key = 3;
+  optional bytes public_key = 3 /* copybara:strip_begin */
+      [(datapol.semantic_type) = ST_SECURITY_KEY] /* copybara:strip_end */;
 }