University Data:

Information deemed critical to the mission and operation of the university. Such data is often managed and distributed or exchanged across multiple organizational units within and beyond the university. An item may be university data if it meets one or more of the following criteria:

• at least two organizational units use the data and consider it essential; integration of information systems requires the data;
• the university must ensure the integrity, privacy, or security of the data to comply with legal, regulatory, competitive, or external reporting requirements;
• a broad cross section of users refer to or maintain the data;
  the university needs the data to plan, manage, audit, or improve its operations;
• unauthorized access to or use of the data represents an unacceptable risk to the university or its Constituents, including data protected by the Family Educational Rights and Privacy Act (FERPA).

This definition excludes other information that is public record, personal property, intellectual property, academic research data, or content directly related to or produced through teaching and learning activities.

Data Privacy:

While information security is concerned with protection, privacy is concerned with the sensitivity of data, the justification for collecting data, and decisions about notification and sharing. International, Federal, and State legislation and regulations may apply. Privacy issues vary greatly by location and subject matter of data, posing significant liabilities, especially with regard to protected personal information (PPI) and personal identifying information (PII). A few resources of note include: