Data Classification Definitions
Tier 1: Low Risk Classification
- Risk Description: Covers public information with minimal risk if disclosed.
- Access: Open to anyone, regardless of institutional affiliation.
- Data Types: Publicly available information.
Tier 2: Moderate Risk Classification
- Risk Description: Involves data that poses a reasonable risk and may lead to civil liability. Often tied to contracts or regulatory compliance.
- Data Types: Individually identifiable, confidential, proprietary.
Tier 3: High Risk Classification
- Risk Description: Includes data that could cause significant harm or legal liability if disclosed. Typically governed by legal and regulatory requirements.
- Data Types: Individually identifiable (including PHI), sensitive, confidential.