Information Classification

Question 1

Sensitive info?

Answer 1

• should be protected from being publicly released as could harm safety of organisation/person.
  -medical data
  -financial data

Question 2

Non-sensitive info?

Answer 2

Can be released publicly with no fear of negative consequence.
-Shop information.
-Product information

Question 3

Private info?

Answer 3

Relates to individual + should not be shared with anyone else without subject’s permission. Protected by Data Protection Act + must be stored securely so cannot be accessed without authorisation.
-Home addresses, DoB, Banking details, contact info.
-Employee data=addresses + linked bank acc.

Question 4

Public info?

Answer 4

Released to public + can be seen by everyone + non sensitive.
-Social media posts.
- Public business info like opening times.
-Gov report like national census.

Question 5

Personal info?

Answer 5

Identifiable data of specific individual.
-Full name
-gender
-DoB

Question 6

Business info?

Answer 6

Any data of specific business. Could be public or private.
-Address of headquarters
-Annual sales figures

Question 7

Confidential info?

Answer 7

Private data that is more restricted than sensitive info + access limited to only those who need to know.
-Doctor/therapist notes
-Business profits + losses
-Trade secrets

Question 8

Classified info?

Answer 8

Highly sensitive info stored by government institution + requires highest levels of restricted access. Restricted by law + only viewable by authorised people or groups. OFFICIAL, SECRET, TOP SECRET.
-military data
-Terrorism precautions
-Crime scene reports

Question 9

Anonymised info?

Answer 9

Anonymisation removes personally identifiable data from info so that a person cannot be identified.
Partially anonymised = some personal info has been removed and replaced by a symbol.
Completely anonymised = all identifiable data has been removed.
Bank details often P+C anonymised.
However, if sensitive data isn’t anonymised enough, person can be identified. Useful info can be lost if too much data is anonymised. Public could lose trust in organisation if data is insufficiently anonymised.