Follow the path that best describes the most sensitive piece of information in your file or folder.
1. Does the data contain any of the following?
- Social Security Numbers (SSNs)
- Health/Medical Records (HIPAA)
- Credit Card/Financial Account Numbers
- Biometric Data or Passport IDs
- YES Label: CRITICAL (Strict Access)
- NO Go to Question 2
2. Does the data contain "Non-Public" institutional information, such as:
- Student Education Records (FERPA, e.g., Grades, Transcripts)
- Unpublished Research Data
- University Budgets or Internal Memos
- Employee IDs or Home Addresses
- YES Label: INSTITUTIONAL (Standard University Business)
- NO Go to Question 3
3. Is this information intended for the General Public?
- Course Catalogs
- Campus Maps or Press Releases
- Publicly available Policy Manuals
- YES Label: PUBLIC (Open Sharing)
- UNSURE Default to: INSTITUTIONAL (Safety first!)
Examples:
A student's GPA or Class Rank
Institutional
Why? Protected by FERPA; restricted to "Need to Know" staff.
A research spreadsheet with patient names
Critical
Why? Potential HIPAA/PII violation; must be encrypted/watermarked.
A flyer for a campus "Spring Fling" event
Public
Why? Intended for wide distribution; no security risk.
A list of employee home phone numbers
Institutional
Why? Private contact info; not for public link sharing.
Draft of a patent-pending technology
Critical
Why? High intellectual property value; requires download restrictions.