Skip to main content


Different Types of Information

Know What Information Is on Your Computer, and Secure It

Be aware of what types of information are stored on your computer and take steps to protect it. Cornell Policy 5.10, Information Security, establishes three data security classifications:

  • Confidential – Specific data elements subject to more stringent security requirements.
  • Restricted – Unless otherwise classified, all information used in the conduct of university business is restricted, and not open to the general public.
  • Public – University data that has been explicitly made available to the public, with no authentication required for network access.

All information at Cornell should be protected. Even data that you may not consider sensitive should be protected. Take appropriate measures, outlined in this security handbook, to protect university data, wherever you are and whatever computer you are using.

Examples of the Diverse Types of Data Seen at Cornell

University Data Currently Classified as Confidential

In addition to being subject to Cornell policies and processes, confidential data is subject to more stringent security requirements, as outlined in this chapter and in Securing Your Computer, page 34.

Data currently classified as confidential includes the following, when they appear in conjunction with an individual’s name or other identifier:

  • Social Security numbers
  • Driver’s license numbers
  • Credit card numbers
  • Bank account numbers
  • Protected health information

This set may expand based on future regulatory requirements or designations made by the appropriate university data steward. Data stewards are senior officers of the university responsible for determining how data in their area should be handled. For example, the Vice President for Human Resources is the data steward for administrative data pertaining to Cornell employees. The data steward role is defined in University Policy 4.12, Data Stewardship and Custodianship.

State and federal legislation

In addition to the other measures outlined in this section, some data at Cornell is subject to the following:

  • State Security Breach Notification laws
    • Social Security numbers
    • Credit card data
    • Driver’s license numbers
    • Bank account information
  • Health Insurance Portability and Accountability Act (HIPAA)
    • Health insurance
    • Health records/patient treatment information
  • Gramm-Leach-Bliley Act for Disclosure of Nonpublic Personal Information (GLBA)
    • Loan records
  • Family Education Rights and Privacy Act (FERPA)
    • Tax records of parents and students
    • Grades
  • Sarbanes-Oxley Act
    • Cornell tax records