Data Classifications: Data Types
Data Classification Grid Legend
1 - This service can only be used when care is taken to limit access to authorized individuals. Do not use features that allow any recipient of a link to view the data, as there is no way to ensure the bearer is the intended party. Do not use features that allow the entire Fordham.edu domain (including all students and alumni) to view the data.
2 - To protect this class of data, removable media or a mobile device must be used with a sanctioned encryption product. For guidance, contact [email protected].
3 -This service may be used with the approval of the identified Data Owner. For questions, contact [email protected].
4 - Emailing or sharing data stored from these cloud services must be encrypted before transmitting or sharing. To review your use of this technology, contact [email protected].
5 - This service may be used with the approval of the identified data owner or contact [email protected]. Any communication beyond that must follow rule number 4.
6 - Limited use of Non-Fordham Provided services may be used for data protected under this class. Any communication beyond that is prohibited.
7 - To protect this class of data, videoconferencing may only be used if chat, recording, or transcript generation features are disabled.
Student Educational Records - FERPA
Student directory information may be published unless a student has requested non-disclosure from the University Registrar or Law School Registrar in writing within ten days after the first day of class each semester. In addition, the University, at its discretion, may provide the following directory information: student’s name, address, telephone number, Fordham email address, photograph, date, and place of birth, major field of study, dates of attendance, grade level, enrollment status (e.g., undergraduate or graduate; full-time or part-time), participation in officially recognized activities and sports, weight and height of members of athletic teams, degrees, honors and awards received, the most recent educational agency or institution attended, and other similar information.
-
Fordham Provided Services
-
Blackboard®
-
Devices on PCI-compliant network
-
ServiceNow™
-
Equipment (desktop, laptop, tablet, smartphone)
-
File shares and managed servers (S:\ drive, shared.fordham.edu, storage.fordham.edu)
-
OnBase® by Hyland
-
Panopto®
-
Qualtrics®
-
Zoom™
-
-
Fordham Provided Services
-
Core Google™ Apps (Calendar, Classroom, Docs, Sheets, Sites, Groups, Chat/Meet, Jamboard) (1)
-
Gmail™ / Contacts account (5)
-
Google Drive (1)
-
MailChimp®, Acoustic Marketing Automation (Fordham Messaging Platform / FMP) (3)
-
Microsoft Azure™ Cloud Computing Platform (4)
-
Microsoft Office 365™ (1)
-
Microsoft OneDrive™ for Business (1)
-
Reclaim Hosting (1)
-
Removable media (USB thumb drive) (2)
-
-
Non-Fordham Provided Services
-
Personal desktops and laptops (6)
-
-
Fordham Provided Services
-
Non-Core Google Apps (e.g., Photos, Maps, YouTube™)
-
Text Messaging
-
-
Non-Fordham Provided Services
-
Cloud storage services not covered by University agreements (e.g., Evernote®, Dropbox™, personal Google Drive, iCloud™, Amazon S3™, personal Microsoft Office 365, personal Microsoft OneDrive, personal Microsoft Azure, personal Smartsheet, and personal Reclaim Hosting services)
-
Free or personal web-accessible platforms not covered under University agreements (e.g., ChatGPT, DALL-E, Bard, LLaMA, Make-A-Video, Claude, Stable Diffusion, Hugging Face, BLOOM, NeMo, Reddit, Instagram™, Facebook™, Twitter™, TikTok™, Github™, Picasso®, Flickr®, SmuHug, Forums, Public IT Support).
-
Personal equipment (tablet, smartphone, removable media / thumb drive)
-
Personal third-party email services (e.g., personal Gmail, Hotmail™, Yahoo ®)
-
Text Messaging
-
Third-party survey tools not covered by University agreements (e.g., SurveyMonkey ®, Constant Contact ®)
-
Third-party videoconferencing tools not covered by University agreements (e.g., personal Zoom, personal Microsoft Teams™, FaceTime ®, WhatsApp™)
-
Student Loan Application Information - GLBA/CUI
-
Fordham Provided Services
-
File shares and managed servers (S:\ drive, shared.fordham.edu, storage.fordham.edu)
-
OnBase® by Hyland
-
Qualtrics®
-
-
Fordham Provided Services
-
Fordham Provided Services
-
Blackboard®
-
Core Google™ Apps (Calendar, Classroom, Docs, Sheets, Sites, Groups, Chat/Meet, Jamboard)
-
Devices on PCI-compliant network
-
ServiceNow™
-
Google Drive
-
MailChimp®, Acoustic Marketing Automation (Fordham Messaging Platform / FMP)
-
Non-Core Google Apps (e.g., Photos, Maps, YouTube™)
-
Panopto®
-
Reclaim Hosting
-
Text Messaging
-
-
Non-Fordham-Provided Services
-
Cloud storage services not covered by University agreements (e.g., Evernote®, Dropbox™, personal Google Drive, iCloud™, Amazon S3™, personal Office 365, personal Microsoft OneDrive, personal Microsoft Azure, personal Smartsheet, and personal Reclaim Hosting services)
-
Free or personal web-accessible platforms not covered under University agreements (e.g., ChatGPT, DALL-E, Bard, LLaMA, Make-A-Video, Claude, Stable Diffusion, Hugging Face, BLOOM, NeMo, Reddit, Instagram™, Facebook™, Twitter™, TikTok™, Github™, Picasso®, Flickr®, SmuHug, Forums, Public IT Support).
-
Personal desktops and laptops
-
Personal equipment (tablet, smartphone, removable media/thumb drive)
-
Personal third-party email services (e.g., personal Gmail, Hotmail™, Yahoo®)
-
Text Messaging
-
Third-party survey tools not covered by University agreements (e.g., SurveyMonkey®, Constant Contact®)
-
Third-party videoconferencing tools not covered by University agreements (e.g., personal Zoom, personal Microsoft Teams ™, FaceTime®, WhatsApp™)
-
Personally Identifiable Information - PII
- Financial account number (e.g., credit/debit card numbers, routing number)
- Last name, first name, or initial associated with any one item listed above
- Passport number
- Social Security Number (SSN)
- State-issued ID card number
- Benefits information, workers’ compensation, disability claims
- Performance reviews
- Salary information
- Biographic or demographic data
- Contact information
- Gift data and gift planning information
-
Fordham Provided Services
-
Devices on PCI-compliant network
-
Equipment (desktop, laptop, tablet, smartphone)
-
File shares and managed servers (S:\ drive, shared.fordham.edu, storage.fordham.edu)
-
OnBase® by Hyland
-
Qualtrics®
-
-
Fordham Provided Services
-
Fordham Provided Services
-
Blackboard®
-
ServiceNow™
-
MailChimp®, Acoustic Marketing Automation (Fordham Messaging Platform / FMP)
-
Non-Core Google Apps (e.g., Photos, Maps, YouTube™)
-
Panopto®
-
Reclaim Hosting
-
Text Messaging
-
-
Non-Fordham Provided Services
-
Cloud storage services not covered by University agreements (e.g., Evernote®, Dropbox™, personal Google Drive, iCloud™, Amazon S3™, personal Office 365, personal Microsoft OneDrive, personal Microsoft Azure, personal Smartsheet, and personal Reclaim Hosting services)
-
Free or personal web-accessible platforms not covered under University agreements (e.g., ChatGPT, DALL-E, Bard, LLaMA, Make-A-Video, Claude, Stable Diffusion, Hugging Face, BLOOM, NeMo, Reddit, Instagram™, Facebook™, Twitter™, TikTok™, Github™, Picasso®, Flickr®, SmuHug, Forums, Public IT Support).
-
Personal desktops and laptops
-
Personal equipment (tablet, smartphone, removable media/thumb drive)
-
Personal third-party email services (e.g., personal Gmail, Hotmail™, Yahoo®)
-
Text Messaging
-
Third-party survey tools not covered by University agreements (e.g., SurveyMonkey®, Constant Contact®)
-
Third-party videoconferencing tools not covered by University agreements (e.g., personal Zoom, personal Microsoft Teams™, FaceTime®, WhatsApp™)
-
Protected Health Information - PHI/HIPAA
-
Fordham Provided Services
-
Gmail™ / Contacts account
-
Google Drive
-
OnBase® by Hyland
-
Qualtrics®
-
-
Fordham Provided Services
-
Fordham Provided Services
-
Blackboard®
-
Core Google™ Apps (Calendar, Classroom, Sites, Groups, Chat/Meet, Jamboard)
-
Devices on PCI-compliant network
-
ServiceNow™
-
File shares and managed servers (S:\ drive, shared.fordham.edu, storage.fordham.edu)
-
Equipment (desktop, laptop, tablet, smartphone)
-
MailChimp®, Acoustic Marketing Automation (Fordham Messaging Platform / FMP)
-
Non-Core Google Apps (e.g., Photos, Maps, YouTube™)
-
Panopto®
-
Reclaim Hosting
-
-
Non-Fordham Provided Services
-
Cloud storage services not covered by University agreements (e.g., Evernote®, Dropbox™, personal Google Drive, iCloud™, Amazon S3™, personal Microsoft Office 365, personal Microsoft OneDrive, personal Microsoft Azure, personal Smartsheet, and personal Reclaim Hosting services)
- Free or personal web-accessible platforms not covered under University agreements (e.g., ChatGPT, DALL-E, Bard, LLaMA, Make-A-Video, Claude, Stable Diffusion, Hugging Face, BLOOM, NeMo, Reddit, Instagram™, Facebook™, Twitter™, TikTok™, Github™, Picasso®, Flickr®, SmuHug, Forums, Public IT Support).
-
Personal desktops and laptops
-
Personal equipment (tablet, smartphone, removable media/thumb drive)
-
Personal third-party email services (e.g., personal Gmail, Hotmail™, Yahoo®)
-
Text Messaging
-
Third-party survey tools not covered by University agreements (e.g., SurveyMonkey®, Constant Contact®)
-
Third-party video conferencing tools not covered by University agreements (e.g., personal Zoom, personal Microsoft Teams™, FaceTime®, WhatsApp™)
-
RHI data is classified as Fordham Protected Data and requires the highest levels of protection per the Data Classification and Protection Policy. The key distinction between RHI and PHI is that PHI is associated with or derived from a healthcare service event (i.e., the provision of care or payment for care). RHI is provided as part of voluntary participation in a research study. RHI is covered by other state and federal laws for privacy and confidentiality of research health information and human subjects research protections.
- Fordham Provided Services
-
Gmail™ / Contacts account
-
Google Drive
- OnBase® by Hyland
- Qualtrics®
- Fordham Provided Services
- Microsoft Azure™ Cloud Computing Platform (4)
- Microsoft OneDrive™ for Business (1)
- Microsoft Office 365™ (1)
- Removable media (USB thumb drive) (2)
- Zoom™ (using Fordham credentials) (7)
- Fordham Provided Services
- Blackboard®
- Core Google™ Apps (Calendar, Classroom, Docs, Sheets, Sites, Groups, Chat/Meet, Jamboard)
- Devices on PCI-compliant network
- ServiceNow™
- File shares and managed servers (S:\ drive, shared.fordham.edu, storage.fordham.edu)
- Equipment (desktop, laptop, tablet, smartphone)
- MailChimp®, Acoustic Marketing Automation (Fordham Messaging Platform / FMP)
- Non-Core Google Apps (e.g., Photos, Maps, YouTube™)
- Panopto®
- Reclaim Hosting
- Non-Fordham Provided Services
- Cloud storage services not covered by University agreements (e.g., Evernote®, Dropbox™, personal Google Drive, iCloud™, Amazon S3™, personal Microsoft Office 365, personal Microsoft OneDrive, personal Microsoft Azure, personal Smartsheet, and personal Reclaim Hosting services)
- Free or personal web-accessible platforms not covered under University agreements (e.g., ChatGPT, DALL-E, Bard, LLaMA, Make-A-Video, Claude, Stable Diffusion, Hugging Face, BLOOM, NeMo, Reddit, Instagram™, Facebook™, Twitter™, TikTok™, Github™, Picasso®, Flickr®, SmuHug, Forums, Public IT Support).
- Personal desktops and laptops
- Personal equipment (tablet, smartphone, removable media/thumb drive)
- Personal third-party email services (e.g., personal Gmail, Hotmail™, Yahoo®)
- Text Messaging
- Third-party survey tools not covered by University agreements (e.g., SurveyMonkey®, Constant Contact®)
- Third-party videoconferencing tools not covered by University agreements (e.g., personal Zoom, personal Microsoft Teams™, FaceTime®, WhatsApp™)
Credit Card/PCI
-
Fordham Provided Services
-
Devices on PCI-compliant network
-
-
None
-
Fordham Provided Services
-
Blackboard®
-
Core Google™ Apps (Calendar, Classroom, Docs, Sheets, Sites, Groups, Chat/Meet, Jamboard)
-
ServiceNow™
-
Equipment (desktop, laptop, tablet, smartphone)
-
File shares and managed servers (S:\ drive, shared.fordham.edu, storage.fordham.edu)
-
Gmail™ / Contacts account
-
Google Drive
-
OnBase® by Hyland
-
MailChimp®, Acoustic Marketing Automation (Fordham Messaging Platform / FMP
-
Microsoft Azure™ Cloud Computing Platform (4)
-
Microsoft Office 365™ (1)
-
Microsoft OneDrive™ for Business (1)
-
Non-Core Google Apps (e.g., Photos, Maps, YouTube)
-
Panopto®
-
Qualtrics®
-
Reclaim Hosting
-
Removable media (USB thumb drive)
-
Text Messaging
-
Zoom™
-
-
Non-Fordham Provided Services
-
Cloud storage services not covered by University agreements (e.g., Evernote®, Dropbox™, personal Google Drive, iCloud™, Amazon S3™, personal Office 365, personal Microsoft OneDrive, personal Microsoft Azure, personal Smartsheet, and personal Reclaim Hosting services)
- Free or personal web-accessible platforms not covered under University agreements (e.g., ChatGPT, DALL-E, Bard, LLaMA, Make-A-Video, Claude, Stable Diffusion, Hugging Face, BLOOM, NeMo, Reddit, Instagram™, Facebook™, Twitter™, TikTok™, Github™, Picasso®, Flickr®, SmuHug, Forums, Public IT Support).
-
Personal desktops and laptops
-
Personal equipment (tablet, smartphone, removable media/thumb drive)
-
Personal third-party email services (e.g., personal Gmail, Hotmail™, Yahoo®)
-
Text Messaging
-
Third-party survey tools not covered by University agreements (e.g., SurveyMonkey®, Constant Contact®)
-
Third-party videoconferencing tools not covered by University agreements (e.g., personal Zoom, personal Microsoft Teams™, FaceTime®, WhatsApp™)
-
Attorney-Client Privileged Information
-
Fordham Provided Services
-
File shares and managed servers (S:\ drive, shared.fordham.edu, storage.fordham.edu)
-
Equipment (desktop, laptop, tablet, smartphone)
-
OnBase® by Hyland
-
-
Fordham Provided Services
-
Fordham Provided Services
-
Blackboard®
-
Devices on PCI-compliant network
-
ServiceNow™
-
MailChimp®, Acoustic Marketing Automation (Fordham Messaging Platform / FMP)
-
Non-core Google Apps (e.g., Photos, Maps, YouTube™)
-
Panopto®
-
Qualtrics®
-
Reclaim Hosting
-
Text Messaging
-
-
Non-Fordham Provided Services
-
Cloud storage services not covered by University agreements (e.g., Evernote®, Dropbox™, personal Google Drive, iCloud™, Amazon S3™, personal Office 365, personal Microsoft OneDrive, personal Microsoft Azure, personal Smartsheet, and personal Reclaim Hosting services)
- Free or personal web-accessible platforms not covered under University agreements (e.g., ChatGPT, DALL-E, Bard, LLaMA, Make-A-Video, Claude, Stable Diffusion, Hugging Face, BLOOM, NeMo, Reddit, Instagram™, Facebook™, Twitter™, TikTok™, Github™, Picasso®, Flickr®, SmuHug, Forums, Public IT Support).
-
Personal desktops and laptops
-
Personal equipment (tablet, smartphone, removable media/thumb drive)
-
Personal third-party email services (e.g., personal Gmail, Hotmail™, Yahoo®)
-
Text Messaging
-
Third-party survey tools not covered by University agreements (e.g., SurveyMonkey®, Constant Contact®)
-
Third-party videoconferencing tools not covered by University agreements (e.g., personal Zoom™, personal Microsoft Teams™, FaceTime®, WhatsApp™)
-
Fordham Protected Data
-
Family Educational Rights and Privacy Act (FERPA)
-
Gramm-Leach-Bliley Act (GLBA)
-
Health Insurance Portability and Accountability Act (HIPAA)
-
Payment Card Industry Data Security Standards (PCI DSS)
-
General Data Protection Regulation (GDPR)
-
Stop Hacks and Improve Electronic Data Security Act (SHIELD Act)
Fordham Sensitive Data
-
Fordham Provided Services
-
Blackboard®
-
Devices on PCI-compliant network
-
Equipment (desktop, laptop, tablet, smartphone)
-
File shares and managed servers (S:\ drive, shared.fordham.edu, storage.fordham.edu)
-
OnBase® by Hyland
-
Qualtrics®
-
-
Fordham Provided Services
-
Core Google™ Apps (Calendar, Classroom, Docs, Sheets, Sites, Groups, Chat/Meet, Jamboard) (1)
-
Gmail™ / Contacts account (5)
-
Google Drive (1)
-
MailChimp®, Acoustic Marketing Automation (Fordham Messaging Platform / FMP) (3)
-
Microsoft Azure™ Cloud Computing Platform (4)
-
Microsoft Office 365™ (1)
-
Microsoft OneDrive™ for Business (1)
-
Provided removable media (USB thumb drive) (2)
-
Zoom™ (7)
-
-
Fordham Provided Services
-
ServiceNow™
-
Non-core Google Apps (e.g., Photos, Maps, YouTube™)
-
Panopto®
-
Reclaim Hosting
-
Text Messaging
-
-
Non-Fordham Provided Services
-
Cloud storage services not covered by University agreements (e.g., Evernote®, Dropbox™, personal Google Drive, iCloud™, Amazon S3™, personal Microsoft Office 365™, personal Microsoft OneDrive™, personal Microsoft Azure™, personal Smartsheet, and personal Reclaim Hosting services)
- Free or personal web-accessible platforms not covered under University agreements (e.g., ChatGPT, DALL-E, Bard, LLaMA, Make-A-Video, Claude, Stable Diffusion, Hugging Face, BLOOM, NeMo, Reddit, Instagram™, Facebook™, Twitter™, TikTok™, Github™, Picasso®, Flickr®, SmuHug, Forums, Public IT Support).
-
Personal desktops and laptops
-
Personal equipment (tablet, smartphone, removable media / thumb drive)
-
Personal third-party email services (e.g., personal Gmail, Hotmail™, Yahoo®)
-
Text Messaging
-
Third-party survey tools not covered by University agreements (e.g., SurveyMonkey®, Constant Contact®)
-
Third-party videoconferencing tools not covered by University agreements (e.g., personal Zoom, personal Microsoft Teams™, FaceTime®, WhatsApp™)
-
Public Data
-
Fordham Provided Services
-
Blackboard®
-
Core Google™ Apps (Calendar, Classroom, Docs, Sheets, Sites, Groups, Chat/Meet, Jamboard)
-
Devices on PCI-compliant network
-
ServiceNow™
-
Equipment (desktop, laptop, tablet, smartphone)
-
File shares and managed servers (S:\ drive, shared.fordham.edu, storage.fordham.edu)
-
Gmail™/ Contacts account
-
Google Drive
-
MailChimp®, Acoustic Marketing Automation (Fordham Messaging Platform / FMP)
-
Microsoft Azure™ Cloud Computing Platform (4)
-
Microsoft Office 365™ (1)
-
Microsoft OneDrive™ for Business (1)
-
Non-Core Google Apps (e.g., Photos, Maps, YouTube™)
-
OnBase® by Hyland
-
Provided removable media (USB thumb drive)
-
Qualtrics®
-
Reclaim Hosting
-
Text Messaging
-
-
Non-Fordham Provided Services
-
Cloud storage services not covered by University agreements (e.g., Evernote®, Dropbox™, personal Google Drive, iCloud™, Amazon S3™, personal Microsoft Office 365, personal Microsoft OneDrive, personal Microsoft Azure, personal Smartsheet, and personal Reclaim Hosting services)
- Free or personal web-accessible platforms not covered under University agreements (e.g., ChatGPT, DALL-E, Bard, LLaMA, Make-A-Video, Claude, Stable Diffusion, Hugging Face, BLOOM, NeMo, Reddit, Instagram™, Facebook™, Twitter™, TikTok™, Github™, Picasso®, Flickr®, SmuHug, Forums, Public IT Support).
-
Personal desktops and laptops
-
Personal equipment (tablet, smartphone, removable media/thumb drive)
-
Personal third-party email services (e.g., personal Gmail, Hotmail™, Yahoo®)
-
Text Messaging
-
Third-party survey tools not covered by University agreements (e.g., SurveyMonkey®, Constant Contact®)
-
Third-party videoconferencing tools not covered by University agreements (e.g., personal Zoom™, personal Microsoft Teams™, Facetime®, WhatsApp™)
-
-
None
-
None