Get data classification guidance for your research

Published: August 7, 2024

A person interacting with personal and secure data.

Data classification is a foundational step in determining how your research data should be protected to reduce the risk of data and intellectual property loss. Resources created by the Research Information Security Program are available to help you make informed cyber security decisions about your data and meet expectations under the University’s Institutional Research Data Management Strategy.

Resources for research data

Data classification research examples: Refer to the research-specific explanation and examples provided for level 1 to 4 data.
Data classification decision tool for research: Use this handy tool to determine the appropriate classification level for your research data, from publicly available data to highly sensitive data.

Tips from the Research Information Security team

To make the best use of the data classification research examples and decision tool, apply these tips:

Rely on your expertise, but consult.

As a researcher, you are likely best situated to understand the degree of risk and potentiality for harm inherent in your project’s data, helping to determine how it should be protected. Be sure to also consult data transfer/use agreements, ethics protocols and other compliance documents for requirements.
Classify early.

Sensitive data (level 3 or 4) requires stronger security measures to adequately protect it. Classifying your data during the early stages of your project will help provide you with ample time to secure your systems and devices, and even include security-related expenses in grant applications.
Record and manage your data.

While classifying your data is important, if you don’t record the location of your data, it can be difficult to know which systems and devices you need to protect and to what degree. Also, in the case of a data breach or system failure, it’s easier to know what data was affected and its sensitivity. Refer to the Information Security Handbook and U of T Libraries for information on managing your research data.
Re-evaluate as your project progresses and evolves.

Research data can often change throughout a project and so might its classification. Therefore, it is important to re-evaluate the classification of your data throughout the arc of your research project, as safeguards necessary to protect it can change as well.

Support

If you need help or have questions related to information security and research data, contact the Research Information Security team for a consultation.

Best practices & tips

Best practices & tips

Best practices & tips