Data classification is determined according to the nature and sensitivity of the data and the potential impact if it is disclosed, altered, lost, or misused.
| Classification Level | When Is It Used? | Illustrative University Examples |
|---|---|---|
| Top Secret | When disclosure could cause severe or exceptional harm to national interests or other vital interests. | Limited datasets with a significant national impact, as designated by the authorized authority. |
| Secret | When disclosure could cause serious harm to the University, individuals, or regulatory obligations. | Sensitive investigations, high-risk vulnerabilities, and certain highly sensitive research data. |
| Restricted | When access must be limited and disclosure could cause harm or violate privacy. | Student and employee records, grades, salaries, medical reports, and login credentials. |
| Public | When publication has been approved and no adverse impact is expected. | Published news, public guides, official contact information, and approved open data. |
Before Sharing Any Data
• Identify the nature of the data and the purpose for which it will be used.
• Verify the classification level assigned to the data or recorded in the system.
• Assess the potential impact of disclosure, alteration, or loss.
• Share only the minimum amount of data necessary.
• Verify the recipient’s identity and authorization, and use an official, secure channel.
• Obtain the required approvals and document the data-sharing process.
• When in doubt, do not send the data; consult the Data Owner or the Data Office.