Privacy and Information Security | University of Illinois

Financial Data Classifications

CITES Security has broken University Sensitive Data into six categories, including Financial Data. If this is your first time using our data classifications, please take a moment to review the University's terminology so that you understand specific definitions used in the classifications.

Financial Data

Credit or debit card numbers

Classification: Highly Sensitive Data
Can Share With: No one
Can NOT Share With: Unit, Other Units, Other Schools, The Government, Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Credit or debit card numbers security code

Classification:Highly Sensitive Data
Can Share With: No one
Can NOT Share With: Unit, Other Units, Other Schools, The Government, Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Credit or debit card numbers password that permits access to account

Classification:Highly Sensitive Data
Can Share With: No one
Can NOT Share With: Unit, Other Units, Other Schools, The Government, Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Bank account number

Classification: Highly Sensitive Data
Can Share With: Unit, Other Units, Other Schools, and The Government as long as there is a legitimate business need for authorized individuals to see
Can NOT Share With: The Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Customer account information (i.e. payments, transactions or collections)

Classification:Highly Sensitive Data
Can Share With: Unit, Other Units, Other Schools, and The Government as long as there is a legitimate business or educational need for authorized individuals to see
Can NOT Share With: The Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

University cash management funds, wire transfers

Classification:Highly Sensitive Data
Can Share With: Unit, Other Units, Other Schools, and The Government as long as there is a legitimate business need for authorized individuals to see
Can NOT Share With: The Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Student loan agreements, loan balances, transactions, collection

Classification: Highly Sensitive Data
Can Share With: Unit, Other Units, Other Schools, and The Government as long as there is a legitimate business or educational need for authorized individuals to see
Can NOT Share With: The Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Tax ID Number (FEIN)

Classification: Highly Sensitive Data
Can Share With: Unit, Other Units, Other Schools, and The Government as long as there is a legitimate business need for authorized individuals to see
Can NOT Share With: The Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Donor personal information, credit cards, bank accounts, employment, family info, amount donated

Classification: Highly Sensitive Data
Can Share With: Unit, Other Units, Other Schools, and The Government as long as there is a legitimate business need for authorized individuals to see
Can NOT Share With: The Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Procurement Card numbers (P-Card)

Classification: Highly Sensitive Data
Can Share With: Unit, Other Units, Other Schools, and The Government as long as there is a legitimate business need for authorized individuals to see
Can NOT Share With: The Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Point of Sale Transactions

Classification: Internal
Can Share With: Unit, Other Units, Other Schools, and The Government as long as there is a legitimate business need for authorized individuals to see
Can NOT Share With: The Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

Parent's Financial Records

Classification: Highly Sensitive Data
Can Share With: Unit, Other Units, Other Schools, and The Government as long as there is a legitimate business need for authorized individuals to see
Can NOT Share With: The Media
Need to use Encrypted Transport to Share: Yes
Store on Non-University Servers: Not without authorization and contract

General loan interest rate and payment minimums

Classification: Public
Can Share With: Unit, Other Units, Other Schools, and The Government. Can share with the media through the Office of Public Affairs
Can NOT Share With: N/A
Need to use Encrypted Transport to Share: No
Store on Non-University Servers: Yes