All institutional data must be assigned one of four data classification levels based on compliance, privacy, sensitivity, operational usage, and risk. Institutional data must be protected with security controls and access authorization mechanisms identified within The Ohio State University’s Information Security Standard. The level of protection required for institutional data is based on the data classification level assigned to such data.

Data Element Classification Assignments can be viewed at 

https://cybersecurity.osu.edu/system/files/osuidp-dataelementclassificationassignments.pdf