Data Classification Standards
| Data Classification: | Government Classified |
| Risk from Disclosure: | High |
| Description: | Data owned and classified by the U.S. Federal government |
| Examples: | Government classified data (Confidential, Secret, Top Secret) |
| Data Classification: | Restricted |
| Risk from Disclosure: | High |
| Description: | Data for which an unauthorized disclosure is expected to have a severe or catastrophic effect on Baylor's operations, assets or individuals. |
| Examples: | • Social Security Number • Credit Card Number** • Driver's License Number • Credential for University Systems • Electronic Protected Health Information • Bank Account number |
| Data Classification: | Protected |
| Risk from Disclosure: | Moderate |
| Description: | Data for which unauthorized release is expected to have a serious adverse effect on Baylor's operations, assets or individuals. |
| Examples: | • Educational Records as defined by FERPA • Passport Data • University Intellectual Property • Human Resources data • Protected Data related to research (IRB) • University Financial Information |
| Data Classification: | Non-Public |
| Risk from Disclosure: | Low |
| Description: | Data for which unauthorized disclosure is expected to have limited effect on Baylor's operations, assets or individuals. |
| Examples: | • University ID number • BearID • Any university data not otherwise categorized |
| Data Classification: | Public |
| Risk from Disclosure: | None |
| Description: | All public data |
| Examples: | General access data from the university website, press releases, and other public sources |
**Credit card numbers may not be stored electronically. For more information see https://www.baylor.edu/pci/index.php?id=73329
Special considerations - The classification table only provides general guidance on the minimum level of risk of for a data category. External regulations, contracts and/or use cases may increase the level of risk and thus categorization.
Data Descriptions adapted from FIPS PUB 199 - https://csrc.nist.gov/publications/fips/fips199/FIPS-PUB-199-final.pdf