Sensitive university data must be protected from compromise, such as unauthorized or accidental access, use, modification, destruction, or disclosure. Classifying or labeling the data helps determine the minimum security requirements necessary to keep it safe.
The university has adopted the following data classification types:
- Highly Confidential Information
- Confidential Information
- Public Information
The type of classification assigned to information is determined by the Data Trustee—the person accountable for managing and protecting the information’s integrity and usefulness.
Review the Data Classification Table for the types of data you access, handle, or store. (Be mindful this is not an exhaustive list of examples.)
IMPORTANT: Regulated data such as HIPAA and Payment Card Industry (PCI) may have additional security requirements. If you access, handle, or store such data, contact your campus-specific IT department for more information.
In order to fully understand the risk associated with a service, make sure to take into account both the data classification and impact.
Learn more about Adverse Impact
Data Classification Table
Type | Description | Examples | |
---|---|---|---|
Highly Confidential | This type includes data elements that require protection under laws, regulations, contracts, relevant legal agreements and/or require the university to provide notification of unauthorized disclosure/security incidents to affected individuals, government agencies or media. Requirements when accessing, handling or storing:
|
|
|
Confidential | This type includes data elements usually not disclosed to the public but are less sensitive than highly confidential data. If a legally required and applicable Colorado Open Records Act (CORA) request is submitted, these records may be released. Requirements when accessing, handling or storing:
|
|
|
Public | This type includes any data on university websites to which the data trustee allows access without authentication and data made freely available through university print material. |
|