What exactly is critical information?
Certain information requires special care and handling, especially when inappropriate handling could result in:
- Criminal or civil penalties
- Identity theft or personal financial loss
- Invasion of privacy
- Unauthorized access to the information
Many kinds of information require special handling. For example, all personally identifiable student education records, including grades, are sensitive and require reasonable levels of protection.
But some information is especially sensitive and is classified by IU as critical. Requiring the very highest level of protection, this critical information includes:
- Social Security numbers (SSN)
- Credit card numbers
- Debit card numbers
- Bank account or other financial account numbers
- Driver’s license numbers
- State ID card numbers
- Student loan information
- Protected health information or individually identifiable health information relating to past, present, or future conditions, provisions of health care, and payment for the provisions of health care
- Foundation donor data
- Passport numbers
- International Visa numbers
- Passwords, passphrases, PIN numbers, security codes, and access codes. Note: Personal passphrases and codes should never be shared with anyone.
Usually, a critical information element needs to be accompanied by an individual’s name in order to result in harm due to inappropriate handling, but not always.
Check with the University Information Policy Office (UIPO) at email@example.com or 812-855-UIPO if you are unsure whether you need to apply special care and handling to the information elements and assets you use.