Law / United States / 
Ohio
Northeast Ohio Medical University, university data
In force since .
A sensitive categories rule binding government bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Security, Governance
What it requires
- This binds Northeast Ohio Medical University and its data users; it names no vendor.
- If you are Northeast Ohio Medical University, assign all university data to a classification level (public, internal, restricted or highly restricted) based on compliance, legal, criticality, operational usage and risk considerations (rule 3349-9-18(D)(2)(b)).
- If you are Northeast Ohio Medical University, grant permission to access, use, disclose or generate university data only to authorized data users, only for legitimate university purposes and based on their roles and compliance with university, contractual and legal requirements (rule 3349-9-18(D)(1)(b)).
These lines are LexLint's reading of the law's text.
What this law does
Rule 3349-9-18 of the Ohio Administrative Code establishes the framework of Northeast Ohio Medical University for the classification, governance, access, protection and lifecycle management of university data. All university data must be assigned to a classification level.
Permission to access, use, disclose or generate university data is granted to authorized data users only for legitimate university purposes, based on their roles and compliance with university, contractual and legal requirements. The rule sets four classification levels, from least to most restrictive: public, internal, restricted and highly restricted. The rule took effect .
Section 3345.011 of the Revised Code defines a state university as a public institution of higher education that is a body politic and corporate, and recognizes Northeast Ohio Medical University as a state university.
When LexLint raises it
When your app profile says your app serves colleges and universities.
Back to the example · Lint your app
Page updated .