Data Classification and Handling Policies

Protected Level 1:

1. Must be encrypted
2. With approved procedures

Protected Level 2:

1. Should be encrypted
2. With approved procedures

Protected Level 3:

1. With approved procedures for aggregate data.

Additional email procedures

• SDSU e-mail is not encrypted by default.
• Never forward emails containing Protected Level 1 information to personal email accounts.