This consists of all information related to the business of the University of Chicago that exists in electronic, digital, printed, or other forms. It includes but is not limited to text, graphics, video, audio, still images, databases, and spreadsheets.
- A data category is a high-level classification of University Data that requires specific security or privacy considerations.
- Each data category represents a collection of data sets with unique access requirements; e.g., specified users, job duties, scope.
- Examples: student financial accounts, student medical records, undergraduate admissions records.
- Each data category should be granular enough to assign to a University Data Business Owner and Data Steward.
- If related sets of data have the same Data Business Owner, the same Data Steward, and the same access requirements, then they should be placed in the same data category.
Data Business Owner
- A Data Business Owner has oversight responsibility for the portion of University Data that is related to the university functions managed, administered or run by the units and personnel who report to him or her.
- Each Data Business Owner will assign one or more Data Stewards to be responsible for data management within the Data Business Owner’s unit.
- A Data Steward, assigned by a Data Business Owner, has the primary responsibility for management of a designated set of University Data.
- All University Data must have a specific Data Steward.
- On occasion, the Data Steward and Data Custodian may be the same individual. This is especially the case when the data consists of hard copy or printed documents or resides on a server in a location other than the central data centers.
- College-specific data that need special security or privacy considerations will be defined further by the designated Data Steward and Data Custodian.
- A Data Custodian is assigned specific data management responsibilities by a Data Steward.
- A Data Custodian typically will control access rights to data he or she manages.
- A Data Custodian implements controls to ensure the integrity, security, and privacy of the data.
- On occasion, the Data Custodian and Data Steward may be the same individual. This is especially the case when the data consists of hard copy or printed documents or resides on a server in a location other than the central data centers.
- College-specific data that need special security or privacy considerations will be defined further by the designated Data Custodian and Data Steward.