Data Classification enables the University to determine appropriate protection requirements according to the nature, sensitivity, and potential impact of unauthorized access, disclosure, or misuse of data.
The Data Office promotes consistent data classification practices across the University to help determine appropriate requirements for protection, access, sharing, storage, and handling.
Why Do We Classify Data?
Data classification helps to:
- Protect data according to its sensitivity.
- Determine appropriate access rights.
- Support data sharing and publication decisions.
- Reduce the risk of unauthorized disclosure.
- Apply appropriate security and protection controls.
- Support regulatory compliance.
Classification Process
Data is classified by considering its nature, intended uses, and the potential impact of improper handling. Appropriate controls are then applied throughout the data lifecycle.
Classification should be reviewed whenever there is a significant change in the nature, use, or regulatory requirements associated with the data.
Everyone Has a Role
All data users are responsible for handling data according to its classification and for avoiding disclosure or sharing outside approved authorities and channels.