Data Classifications

Confidential

Electronic Form

Restricted, high-risk information about an individual or the University. Must be encrypted when in transit on the network and secured and monitored in electronic or physical data storage. Data must be protected with strong passwords. Data cannot be copied onto portable media (including laptops).

Data may not be housed on any personal storage or personal third-party website or storage. Data may only be stored on authorized locations:

Departmental Shares
Banner Information Systems
University Data Warehouse
Banner Document Management System
Hosted repositories in the United States of America acquired through contractually approved, third-party agreements

Must not be posted on any website or sent through email.

Print Form

For disposal, documents must be shredded using cross cut shredders

Retained documents must be stored in locked cabinets.

Sensitive

Electronic Form

Data must be protected with strong passwords. Data cannot be copied onto portable media (including laptops) unless encryption is provided by OIT.

Data may not be housed on any personal storage or personal third-party website or storage. Data may only be stored on authorized University provided system storage.

Departmental Shares
Banner Information Systems
University Data Warehouse
Banner Document Management System
Hosted repositories in the United States of America acquired through contractually approved, third-party agreements

Must not be posted on any public website or sent through email.

Print Form

For disposal, documents must be shredded using cross cut shredders

Retained documents must be stored in locked cabinets.

Unrestricted

Electronic Form

Information that is generally available and open to the public. This information may be posted externally with appropriate approval (unit head). May be sent through email.

Departmental Shares
Banner
BDMS
SJU Google Documentation – can be shared with emails outside of SJU
SJU Gmail