Data Classification Matrix for Information Security

This document is intended for data protection only.  Data protection is the implementation of administrative, technical, or physical measures to guard against the unauthorized access to data.  (Do Not Use for Data Disclosure)

Any information classified differently per regulation or policy will be protected at the highest classification level.

Categories (2) Confidential, (3) Restricted and (4) High Risk are classified as Sensitive Information per PPM 10-1, Information Security Policy.

1 Public: (P) Although there are no restrictions on disclosure to protect public data (because the data is provided for broad viewing access), sufficient protection must be applied to prevent unauthorized modification of such data.
2 Confidential: (C) Data that the University has determined should be protected because it may expose the University to loss if disclosed, but is not protected by federal or state legislation.
3 Restricted: (R) Information assets for which there are legal requirements prohibiting or imposing financial penalties for unauthorized disclosure. Data covered by federal and state legislation, such as FERPA, GRAMA, or the Data Protection Act, are in this class.
4 High Risk: (H) Data that could be used to steal an individual's identity or cause harm to the individual, and which there are legal requirements or industry standards prohibiting or imposing financial penalties for unauthorized disclosure. Data covered by GLB and PCI are in this class.
  Access Groups
Data / Information / Record FERPA GRAMA GLB PCI University
Address, telephone, e-mail address R*        
Attendance Dates R*        
Birthdates / birthplace R R     C
Degrees / honors / scholarships R*        
Last school attended R*        
Major field of study R*        
Name of student R*        
Name / weight / height (Athletes Only) R*        
Number of course units in which enrolled R*        
Participation in official activities R*        
Password         C
Student ID number R R     C
Class level R        
Class schedule R        
Student enrollment R R      
Current academic status R R      
Ethnicity R R      
Fees assessed or paid R R      
Financial aid recipient R R      
Gender   R      
Grade point average or grade points R R      
Grades in courses R R      
Instructors R        
Parent's or guardian's name or address R        
Past academic status R R      
Residency status (fees) R R      
Selective service / veterans administration status R        
Special programs (i.e., EOP) R        
Transcript R R      
Units attempted R        
Units completed R        
Social security number     H H H
Credit card number       H  
Bank account numbers     H   H
Tax Identifier Number (TIN)     H H H

* Per FERPA, student directory information is classified as public unless the student chooses to restrict this information by notifying the Registration or Admissions Office that they want their information kept confidential.