Data classification establishes an operating foundation regarding the use and governance of the various types of data available at the institution.
Champlain College takes seriously its commitment to respect and protect the privacy of its students, alumni, applicants, faculty and staff, as well as to protect the confidentiality of information important to the College’s academic mission. For that reason, Champlain College has classified its information assets into the categories of Restricted, Confidential and Unrestricted. Data classification provides a vital step in integrating security into the College’s business. It establishes an operating foundation that makes it easy for all Champlain constituents to understand the use and governance of the various types of data available at the institution and establish appropriate safeguards. These safeguards include compliance with the Data Security Policy which establishes required security controls based on the classification level.
Protecting Champlain College’s Information assets is the responsibility of every member of the Champlain community. This document applies to, and must be read by, all members of the Champlain College community.
Specific users bound by this policy include:
These users will be required to annually certify that they have read, understood and agreed to follow this policy.
Classification | Restricted Data | Confidential Data | Unrestricted Data |
Level | 3 | 2 | 1 |
Description | Restricted data is defined as data that is required by law to be protected by specific technical security controls or data, if disclosed, may have serious adverse effects on the College’s reputation, resources, services, or individuals. Restricted data requires the highest level of security. | Confidential data is data that the College desires to keep private, due to contract obligations, regulatory requirements or because unauthorized disclosure may have adverse effects on the College’s reputation, resources, services, or individuals. | Information is considered Unrestricted if it is not classified as Restricted or Confidential. |
Data Type Examples |
|
|
|
Student Education Records – Classification | Student Conduct and Disciplinary Records, including Academic Probation and/or Suspension Student Health and Disability Records Student financial information |
|
Note: Student work maintained by faculty or the college must be kept private unless it is intended for public display or disclosure |
Data Stewards as listed by job title in 5.1 and 5.2, represent Data Governance in their functional areas and provide feedback on specific processes or procedures including Data Classification. Inquiries related to classification and other Data Governance questions can be sent to jira+dg@champlain.edu.
The Data Stewards for all data classified as Level Three Restricted Data are as follows: the President, the Vice President of Finance, and the Provost.
Data Type | Steward |
Donor contact information and nonpublic gift amounts | Vice President of Advancement |
Admission applications and financial aid awards | Vice President of Enrollment |
Restricted Research Data | Provost |
Non-public policies and policy manuals | Chief Information Officer |
Champlain internal memos and email, and non-public reports, budgets, plans and financial information, vendor information, student accounts information, tax reporting and banking | Vice President of Finance |
Colleague/Datatel ID numbers | Chief Information Officer |
Contracts and privileged attorney-client communications | Contract & Risk Management Director |
Payroll and employment documentation | Assistant Vice President, People |
Network Diagrams and documentation | Chief Information Officer |
Members of the Champlain College community have reasonable expectations of privacy in their use of information resources. In accordance with Section 6 of the Acceptable Use Policy, systems operators, supervisors, and other College officials may access information resources to locate business information, maintain the system and network, comply with legal requirements, or administer this or other College policies and procedures.
Any individual found to be in violation of this policy shall be subject to the relevant Champlain College disciplinary procedure. Individuals are also subject to federal, state and local laws governing many interactions that occur on the Internet. These policies and laws are subject to change as state and federal laws develop and change.
This policy is subject to change. You will be notified of any changes to the policy. You agree to abide by the policy as updated from time to time.