Law / United States / 
Ohio
Ohio University, data classification
In force since .
A sensitive categories rule binding government bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Security, Governance
What it requires
- This binds Ohio University; it names no vendor, but a system that handles high-classification data is reviewed by the information security office before it goes into production (rule 3337-93-01(F)(1)).
- If you are Ohio University, rate institutional data as high, medium or low in confidentiality, integrity and availability, and apply the highest rating where a data element has a combination of ratings (rule 3337-93-01(B) and (F)).
- If you are Ohio University, identify a data steward for every data element that has a medium or high potential impact (rule 3337-93-01(D)).
- If you are Ohio University, have the information security office review each system or business process that handles high-classification data before it goes into production and every year after (rule 3337-93-01(F)(1)).
These lines are LexLint's reading of the law's text.
What this law does
Rule 3337-93-01 of the Ohio Administrative Code establishes that all information assets of Ohio University will be classified according to their confidentiality, integrity and availability. The rule gives student social security numbers as an example of data that requires a high level of confidentiality. A data steward must be identified for all data elements that have a medium or high potential impact.
User roles or systems handling data with a high classification are reviewed and approved every year by the data steward, the information security office and the chief information officer, and the systems and business processes around those data elements are reviewed by the information security office before they go into production and every year after. The rule took effect .
Section 3345.011 of the Revised Code defines a state university as a public institution of higher education that is a body politic and corporate, and recognizes Ohio University as a state university.
When LexLint raises it
When your app profile says your app serves colleges and universities.
Back to the example · Lint your app
Page updated .