Confidential & Sensitive (Category I) data
- Social Security Number
- Identifiable FERPA Non-directory information (Student educational records such as grades, evaluations, academic standing, class schedule. medical or health records, disciplinary records, attendance records, Financial Aid or Assistance Information; such as application, approval status, earning history, amount, etc) in combination with Personally Identifiable Information such as SSN, picture, or financial information for the student.
- Driver’s License or State Issued ID
- Identifiable Criminal Justice Information (including biometric data, identity history, biographic, property, and case / incident history data) related to criminal history or records in combination with Personally Identifiable information for the individual.
- Credit Card / Debit Card information including Card Numbers, Expiration Date, Cardholder name, Mag Stripe data, CVV / CVC code, and PIN numbers etc.
- Medical / Mental history or Medical Treatment or Diagnosis information in combination with Health insurance policy numbers, or any other HIPAA identifiers for Protected Health Information (http://www.hipaa.com/2009/09/hipaa-protected-health-information-what-does-phi-include/)
- Identifiable Human Genetic Information including identifiable genetic information obtained through national genome repositories
- Identifying information on children under the age of 13; including but not limited to any combination of name, home or physical address, email address, telephone number, SSN, or any other identifiers.
- Information belonging to Federal government with a sensitivity rating of moderate to high (Typically research data from federal government that specifically indicates FISMA Moderate or High should be followed around data management)
- Personally Identifiable Information of European Union citizens, includes names, unique identifiers, financial information, or sexual orientation, racial or ethnic origins, religious beliefs, and trade union memberships.
- Export Controlled information that can either be directly or indirectly used in military applications.