Frequently Asked Questions

Question:  What type of data is considered sensitive and/or critical?

Answer:  To determine what type of data is considered sensitive or critical, use the Information Classification Standard.

As noted in this standard, some examples of information that might be considered Sensitive are:

• Social Security numbers and other identifying numbers
• UGA Card numbers, also known as CAN or 810 numbers
• Student records and prospective student records
• Patient health information and employee insurance information
• Credit card numbers, P-Card numbers, and other PCI data
• Financial aid information
• Bank account numbers
• Donor and alumni records
• Critical infrastructure information (physical plant detail, IT systems information, system passwords, information security plans, etc.)
• Research information related to sponsorship, funding, human subject, etc.
• Information protected by non-disclosure agreements (NDAs) or similar private contracts
• Law enforcement and investigative records