Data Users A Data User is a person who uses institutional data processing services and facilities. Users must be aware of the data's sensitivity and take appropriate measures to prevent unauthorized disclosure of data. Users are responsible for protecting institutional information to which they have access and for reporting security violations. Users must comply with the Data and Systems Security Policy and Standards, and they are accountable for their actions to their regular supervisors and to the Institutional Security Committee. Public information is information that is generally available to the public such as materials prepared by the Public Affairs Department, routine information on Patient Status as provided by Patient Information in response to telephone inquiry.
Public information requires no controls.
Institutional Internal information is information that should be kept within the institution, but requires no special handling in-house. Examples include the memberships of internal committees, employee room locations and, in some cases, student information. Examples include purchasing, accounts payable and most research data. Institutional Confidential information is information that is very sensitive and should be closely controlled from creation to destruction. Examples include patient names, demographics, diagnoses and other clinical data, employee salary amounts, personnel records, legal and proprietary information.