As of February 24, 2017 this policy has been changed to:

University Policy 08 - 015
University Data Management, Classification, and Incident Response