Data Classification

All Western data stored, processed, or transmitted on or through university resources or other resources where university business occurs must be classified into one of the following three categories. The appropriate use and security measures followed to protect data are dependent upon the determined data classification.

Confidential:

Confidential data, if compromised in some form or fashion, is likely to result in significant and/or long-term harm to the institution and/or individuals. Protection of such information could be required by university policy and/or provincial or federal legislation.

This type of information could be strictly protected by provincial or federal statutes or regulations, university policy, or contractual agreement and must be protected from unauthorized access, modification, transmission, storage, destruction, or use.

Access to confidential information is restricted to those who have a legitimate purpose for accessing such information.

Sensitive:

Similar to Confidential data, Sensitive data, when released without authorization, could be expected to cause minor, short-term harm or embarrassment to the institution and/or individuals. In many cases, the
protection of this type of data could be required by university policy and/or provincial or federal legislation.

Access to confidential information is restricted to those who have a legitimate purpose for accessing such information.

Public:

Public data which is readily available to any member of the Western University community or to the general public. This type of information has no legal restriction on access or usage.


Published on  and maintained in Cascade CMS.