COR Data Classification Workflow

This policy document, approved by the City's Data Governance Committee in December 2019, outlines the organization's data classification levels and process for determining the level of risk posed by the contents of a dataset. The purpose of this document and associated process is to ensure that staff are using a consistent process that protects the City and its residents from risk of accidentally making public or otherwise sharing with inappropriate parties data that may cause harm to a specific organization or individual. The City has four levels of data classification: public; internal use; sensitive; and restricted. The definitions and examples of these levels are provided in the document. This document also provides a workflow diagram staff can use when classifying data. This may be helpful for members of the public to better understand how classification decisions are made by staff and the Data Governance Committee.