Data Classification

OU has defined Category E – University Administrative and Financial Information as the default classification for all University Information, until otherwise classified.

The results of classifying your data and system will help guide and inform the selection of appropriate security controls (i.e. safeguards and countermeasures) to adequately protect those information systems. 

Data Classification Standard table with breakdown of Categories A through F

Category           Laws & Regulatory Support Links
A

Health Insurance Portability and Accountability Act of 1996

Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009

Children’s Online Privacy Protection Act (COPPA)

State of Oklahoma Policy, Standards, Procedures, and Guidelines (PSPG)
B

Payment Card Industry (PCI) Data Security Standards

State of Oklahoma Policy, Standards, Procedures, and Guidelines (PSPG)
C

Family Educational Rights and Privacy Act (FERPA)

Higher Education Act of 1965, Gramm-Leach-Bliley (GLBA) Act

Children’s Online Privacy Protection Act (COPPA)

State of Oklahoma Policy, Standards, Procedures, and Guidelines (PSPG)
D1

Department of Defense Cybersecurity Maturity Model Certification

National Institute of Standards and Technology (NIST) Special Publication 800-171

State of Oklahoma Policy, Standards, Procedures, and Guidelines (PSPG)
D2 State of Oklahoma Policy, Standards, Procedures, and Guidelines (PSPG)
E

State of Oklahoma Policy, Standards, Procedures, and Guidelines (PSPG)

Privacy Act of 1974, E-Government Act of 2002

Fair and Accurate Credit Transaction Act of 2003
F State of Oklahoma Policy, Standards, Procedures, and Guidelines (PSPG)
Print Article

Related Articles (1)

8.2.2.1 Information (Data) Classification Standard
The University of Oklahoma (OU) recognizes that institutional information is an asset, critically important to effectively supporting OU’s mission of excellence in teaching, research and creative activity, and service. OU also recognizes the need for appropriate data protections, to ensure student and employee privacy is respected and the University complies with applicable laws.