Data Classification Standard for Administrative Data
Albright College has defined the following Data Classification Standard for administrative data:
Public Data – General administrative data that are intentionally made public are classified as Public Data. This includes all general administrative data that are not legally restricted or judged by Data Stewards to be limited access data. Examples of Public Data include the Albright Master Course Schedule as well as faculty, staff and student directory data. Public Data are often readily available on Albright’s public website.
Restricted Data – By default, all administrative data not explicitly defined as either Highly Sensitive or Public are classified as Restricted Data. Examples of Restricted Data include student grades and faculty/staff salaries.
Appropriate safeguards, including data access authorization and approvals by Data Stewards, must exist for all data that the college is obligated to protect, whether by law, contract, or college policy. Secure credentials are required to access restricted university data. Standards or guidelines governing the access, release, distribution and dissemination of restricted data by individuals authorized to access it is controlled and administered by the designated Data Stewards.
Highly Sensitive Data – Highly Sensitive Data are by definition restricted and include personal information that can lead to identity theft if exposed or disclosed in an unauthorized manner. Specifically, the college defines the following as Highly Sensitive Data:
The first name or first initial and last name in combination with and linked to any one or more of the following data elements about the individual:
- Social security number
- Driver’s license number or state identification card number issued in lieu of a driver’s license number
- Passport number
- Financial/banking account number, credit card number, or debit card number.
For additional information about data management, data access, data classification, or data stewardship at Albright College, please refer to the full Administrative Data Management and Access Policy.