Data Stewards are required by UW System Administrative Policy 1031 and UW-504 Policy (“Data Classification”) to classify institutional data and data systems based on risk and to review the classifications annually. UW-Madison classifies data as Public, Internal, Sensitive, or Restricted. UW-Madison also uses these classifications for provisioning access to data to individuals. Descriptions of UW-Madison’s four data classification categories are below.
Public
Data should be classified as Public prior to display on web-sites or once published without access restrictions; and when the unauthorized disclosure, alteration or destruction of that data would result in little or no risk to the University and its affiliates.
Internal
Data should be classified as Internal when the unauthorized disclosure, alteration, loss or destruction of that data could result in some risk to the University, affiliates, or research projects. By default, all Institutional Data that is not explicitly classified as Restricted, Sensitive or Public data should be treated as Internal data.
Sensitive
Data should be classified as Sensitive when the unauthorized disclosure, alteration, loss or destruction of that data could cause a moderate level of risk to the University, affiliates or research projects. Data should be classified as Sensitive if the loss of confidentiality, integrity or availability of the data could have a serious adverse effect on university operations, assets or individuals.
Restricted
Data should be classified as Restricted when the unauthorized disclosure, alteration, loss or destruction of that data could cause a significant level of risk to the University, affiliates or research projects. Data should be classified as Restricted if protection of the data is required by law or regulation or UW-Madison is required to self-report to the government and/or provide notice to the individual if the data is inappropriately accessed.
Data classifications for institutional data are listed in the table below:
| Data Domain | Data Trustee/Council Member | Data Steward | Data Classification | Major Data Systems |
|---|---|---|---|---|
| Academic Planning | Vice Provost for Data, Academic Planning & Institutional Research Council Rep.: Allison LaTarte | Academic Planning: Michelle Young | Academic Planning Data Classification | Lumen |
| Core Person | Vice Provost for Data, Academic Planning & Institutional Research Council Rep.: Allison LaTarte | Core Person Data Operational Governance Group | Core Person Data Classification | SIS HRS Canvas Salesforce CRM Housing Special Authorization Wiscard UW Health Person Hub WISPER/SFS CAOS InfoAccess Badger Analytics |
| Facilities | Assc Vice Chancellor for Facilities Planning & Management Council Delegate: Margaret Tennessen | Space Management and Real Estate: Jesse Winters | Space Data Classification | INSITE |
| Enrollment Management | Vice Provost for Enrollment Management Council Delegate: Scott Owczarek | Admissions: David Leszczynski | Admissions Data Classification | SIS - Admissions |
| Financial Aid: John Dreger | Financial Aid Data Classification | SIS – Financial Aid | ||
| Student Record: Phil Hull | Student Record Data Classification | SIS DARS Canvas OneBadger/Salesforce |
||
| Finance | Assc Vice Chancellor for Finance Council Delegate: Natalie Feggestad | Finance: Lea Erickson | Finance Data Classification | SFS |
| Budget: Simi Ragha | Budget Data Classification | PlanUW (PBCS) | ||
| Health Information* | Council Delegate: Jack Talaska | See HIPAA Compliance program for protected health information generated by units within the UW–Madison Health Care Component. | ||
| Human Resources | Assc Vice Chancellor for Human Resources Council Delegate: Catharine DeRubeis | Employee Record: Catharine DeRubeis | Employee Record Data Classification | HRS/EPM JEMS/TREMS PMDP |
| Information Technology | Chief Information Officer Council Delegate: Jeff Savoy | Cybersecurity: Jeff Savoy | Cybersecurity Data Classification | Cybersecurity Tools |
| Library | Dean and Vice Provost for Libraries Council Delegate: Lee Konrad | Library: Steve Meyer | Library Data Classification | Alma ILLiad Minds@UW |
| Research Administration | Assc Vice Chancellor for Research Administration Council Delegate: Mark Sweet | Research Administration: Mike Geier | Research Administration Data Classification | WISPER/SFS RAMP (2023) |
| Research Compliance | Assc Vice Chancellor for Research Policy and Integrity Council Delegate: Lynn Haynes | Research Compliance: Heather McFadden | Research Compliance Data Classification | Arrow |
| Research Data* | See OVCRGE research policies | |||
| Teaching & Learning | Senior Vice Provost for Academic Affairs Council Rep.: John Zumbrunnen | Advising: Jeff Shokler | Advising Data Classification | Advising Gateway Advisor Notes System (ANS) Starfish |
| Assessment: Mary Thompson (interim) | Assessment Data Classification | Heliocampus (AEFIS) Honorlock |
||
| Career Services: Jeff Shokler | Career Services Data Classification | Handshake Big Interview |
||
| Teaching & Learning: Dan Voeks | Teaching & Learning Data Classification | Canvas Unizin Data Platform Heliocampus (AEFIS) Kaltura Engage Honorlock Zoom Tophat Turnitin Piazza |
||
| * These data types are governed outside the institutional data governance program. Please consult the affiliated program responsible for this data. | ||||