Data Classification
Definition
Category 1 – Public Information. Public information is information that can be or currently is released to the public. It does not need protection from unauthorized disclosure, but does need integrity and availability protection controls.
Category 2 – Sensitive Information. Sensitive information may not be specifically protected from disclosure by law and is for official use only. Sensitive information is generally not released to the public unless specifically requested.
Category 3 – Confidential Information. Confidential information is information that is specifically protected from either release or disclosure by law. This includes, but is not limited to
- Personal information as defined in RCW 42.56.590 and RCW 19.255.10.
- Information about public employees as defined in RCW 42.56.250.
- Lists of individuals for commercial purposes as defined in RCW 42.56.070 (9).
- Information about the infrastructure and security of computer and telecommunication networks as defined in RCW 42.56.420.
Category 4 – Confidential Information Requiring Special Handling. Confidential information requiring special handling is information that is specifically protected from disclosure by law and for which:
- Especially strict handling requirements are dictated, such as by statutes, regulations, or agreements.
- Serious consequences could arise from unauthorized disclosure, such as threats to health and safety, or legal sanctions.
-
Add to Personal Catalog (opens a new window)
|
