Categorizing confidential documents and information on the basis of confidentiality is an important part of information life-cycle. Once the information has been classified, the information can be stored and / or published on a suitable place, such as a network disk, a local disk of a computer, external recorders, an information system or a cloud service. The owner and / or processor of the data is responsible for classifying the data.

Act on the Openness of Government Activities 24 § states what information and/or documents are classified information. See the data classification and secure storing instruction for more information on what confidential information is.

The purpose of the data classification and storage model is to clarify where data can be published and stored. The classification template allows you to identify which category your data belongs to. For example in a research project, which does not deal with classified information or sensitive personal data, the information is confidential. Once the data category has been identified you can check the material storage table for the locations where this data can be securely stored or published.

Classification model

Public information

• There are no restrictions on viewing the information.
• Note. Copyright must be considered with every publications. Copyright means the final exclusive right of the author possible on the basis of his work. All others do not have the right to use the work without the author's permission.
• Examples of public information include press releases, course information, research publications, public documents, and public websites.

Internal or limited use information

• The information can be viewed by Metropolia staff and students
• For example, internal announcements, teaching materials produced and acquired for internal use, instructions, memos, and materials licensed to the organization.

Confidential information

• The data can be viewed and processed by each member of the relevant group (including the student, e.g. in research projects)
• For example, unfinished credit or projects

Classified information

• The information can only be viewed and processed by specifically authorized persons
• Exam answers and other tests, including various assignments and examinations, as well as grading marks. Note. however, grades and scores are public
• Sensitive personal information, which includes;
• Information on the verbal assessment of a student's personal characteristics
• Information on the person's state of health, disability, health care or social care clientele or rehabilitation (e.g. applications and decisions on special arrangements for studies)
• Information concerning the person's annual income or total assets, or the income and assets on which the aid or benefit is based, or otherwise describe his financial situation

Three different categories are used in the data storage and publication table. Allowed, allowed with limitations and not allowed.

• Allowed means that data in that category may be stored and / or published in the location of that column.
• Allowed with limitations means that certain restrictions, such as restrictions on access rights, must be taken into account when storing and / or publishing information. For example, if exam results are stored in Moodle, the permissions must be restricted so that the data cannot be seen by anyone other than the data handler (teacher).
• Not allowed means that the data may not be stored or published at all in the location of that column.

Note! Copyright must be taken into account in all publications. Copyright means the author's initial exclusive right to decide on the use of his work. Meaning others do not have the right to use the work without the author's permission.

Data storage and processing on network disks and the computer's local hard disk, as well as external recorders

Data storage and processing in information systems and cloud services

Sending of material

Printing of material and disposal of papers and other material

Tietojen luokittelu ja tallennus tietoturvallisesti