Data Classification

Level 0 - Public

  • Can be stored anywhere
  • Not sensitive data and needs no protection
  • Freely distributed to the general public
  • Examples:
    • Anything that may be posted online
    • Class schedules and course catalogues
    • Research data (at the data owner’s discretion)
  • Solutions:
    • Central file servers – H:/drive and P:/drive (free)
    • Internal hosting - Colocation and Central Data Centre (free)
    • Google Drive File Stream (free)

Level 1 - Internal

  • Not shared publicly without authorization
  • Intended for internal employees and approved non-employees such as contractors, vendors or students
  • Examples:
    • Department procedures and policies
    • Budget Information
    • Internal memos, emails and other documents
    • Personnel and students files (benefits, salary, DOB, contact information, ID numbers)
    • Unpublished research data (at owner’s discretion)
    • Student and admission records
    • Faculty and staff employment applications
    • Non-public contracts
  • Solutions:
    • Central file servers – H:/drive and P:/ drive (free)
    • Internal hosting – Colocation and Central Data Centre (free)  
    • Google Drive File Stream (free)

Level 2 – Sensitive/Confidential

  • Requires authorization to view
  • Information protected due to proprietary, ethical, or privacy considerations
  • Access granted on a need-to-know basis according to job responsibilities
  • Examples:
    • Personnel records
    • Personal identifiable information (FIPPA) Section 2.1
    • Donor / alumni information
    • Student records
    • Personal Health information (PHIPA)
    • Demographic information
    • Social insurance number, health insurance policy, financial account, driver’s licence, passport/VISA numbers
    • Donor contact information and non-public gift information
  • Solutions:
    • Central file servers - – H:/drive and P:/ drive (free)
    • Internal hosting – Colocation and Central Data Centre (free) 

Level 3 – Restricted

  • Should not be copied or downloaded from the secure location without permission from the data owner
  • Access to sensitive information is controlled and restricted
  • Examples:
    • Social Insurance Number
    • Credit card information
    • Medical records (PHIPA)
    • Human or animal research data
    • Information on controlled substances such as nuclear, restricted chemical and biological material
    • Other restricted research data
    • Passwords and private encryption keys
  • Solutions:
    • No current solutions exist