Information Security Policies and Procedures Manual
Appendix A: Data Classification by Data Element
Effective: 02/20/2014
Revised: 04/11/2014


Protected Information:

Social Security Number

Driver’s License/State-issued Identification Number

Visa/Passport Number

Credit Card Number

Bank Account Number

Health Insurance Policy Number

Income Tax Records

Personally Identifiable Health Information, including Personally Identifiable Genetic Information

Classified Research Data

Personal Finance Disclosure/Information

Identifiable Human Subjects Research Data designated as Level 3 by the Institutional Review Board (IRB)

Research Data with Export Control/ITAR limitations


Sensitive Information:

Data defined as confidential by the Family Educational Rights and Privacy Act (FERPA)

Employment Applications

Employee Performance Evaluations

Confidential Donor Information

Identifiable Human Subjects Research Data designated as Level 2 by the IRB

Minutes from Confidential Meetings

Accusations of Misconduct and records from investigations

Common Identifiers: Date of Birth, Place of Birth, Mother’s Maiden Name

Demographic Information such as race, ethnicity, gender, sexual orientation or identity when personally identifiable

Admission applications

Privileged Attorney-Client Communications

ID Photos