Core Person Data Domain

Data Domain Scope and Subdomains

The Core Person data domain encompasses basic demographic and contact data elements that describe UW-Madison constituents. The Core Person data domain does not have subdomains, but Core Person data elements are used across other data domains. The Core Person data domain will work closely with other data domains to ensure the best quality person data across domains.

Core person data can generally be categorized as follows:

• Demographic information includes elements such as name, date of birth and/or death, birth gender and gender identity, citizenship and race or ethnicity data.
• Location information includes home or work addresses, on-campus locations or other information about where a person may work or live.
• Contact information includes phone, email or other contact information.
• Identifier information includes various identifiers that are used to uniquely identify a person. Examples might include SSN, driver’s license number, UW-Madison photo ID number and photo ID image, etc.

Each of the above categories may also include preference information or other metadata that indicates a person’s preference about how their information may be presented or used.

Core person data may also be subject to oversight of other Institutional Data Stewards (and vice versa).

Data Trustee

Data Trustees are university officials with authority over institutional data, as designated by Data Governance Council. Data trustees are accountable for managing, protecting, and ensuring the integrity and usefulness of institutional data and for upholding UW-Madison policies, UW System policies, state laws, and federal laws applicable to the institutional data.

The Data Governance Council recognizes that core person data exists across many lines of business across the university, but that UW-Madison has an institutional interest in managing the quality, accuracy and security of information that it collects about its constituents. As such, the data trustee for the core person data domain is responsible for ensuring the integrity, security and usefulness of core person data across the institution.

Institutional Data Stewards

Institutional data stewards, who are assigned by and accountable to Data Trustees, help define, implement, and enforce data management policies and procedures within their specific data domain. Institutional data stewards have delegated responsibility for all aspects of how data is acquired, used, stored and protected throughout its entire lifecycle from acquisition through disposition.

Since core person data is collected, managed and curated across many different data domains, stewardship of core person data is assigned to the Core Person Data Operational Governance Group. This group shall include representation from the following data domains:

* primary point of contact

The Core Person Data Operational Governance Group is charged with defining standards and guidelines for how core person data is to be collected, used and protected by UW-Madison entities that may handle it. Additionally, Core Person Data Operational Governance Group shall be responsible for identifying key technical and organizational infrastructure needed for UW-Madison to effectively and responsibly manage core person information.

Major Data Systems

UW System Administrative Policy 1031 requires Institutional Data Stewards to identify and classify the major systems where data from their data domain resides. System classification level is determined by the highest classification level of data associated with a system but does not indicate that all data associated with the indicated system are necessarily classified at this level. The name and classification of the major systems where Core Person data reside are:

Data Classification Rationale

UW System Administrative Policy SYS-1031 and UW-Madison policy UW-504 require that data be classified according to its risk. The risk level of core person data is often contextual, based on the nature of an individual’s relationship to the institution (e.g., student, employee) and the manner in which the information is shared (internal to the UW vs. shared externally). The Core Person Data Operational Governance Group is charged with defining standards and guidelines for the classification of core person data based on context.

Additional Information

Data Steward Responsibilities – Core Person Domain

These duties are executed jointly by the operational governance group defined above.

• Ensure core person data is treated as a shared university resource
• Responsibly manage core person data throughout the entire data lifecycle
• Identify and document core person data.
• Coordinate guidelines and processes for access to protected core person data among data stewards that collect and manage protected core person data.
• Coordinate guidelines and processes for sharing core person data to the extent allowable under applicable laws, regulations, policies, standards, and procedures.
• Actively manage the quality and integrity of core person data and data products
• Classify core person data in accordance with applicable university data classification policy.
• Ensure any system holding core person data shall be purposefully planned, inventoried, and implemented
• Ensure Institutional data products source core person data from systems of record or systems of reference.
• Apply and/or ensure compliance with procedures, standards, and guidelines as developed and approved by the Data Governance Council.

Appendix 1 – Initial List of Core Person Data Elements