AI Data Safety

When using generative AI, it's crucial to be mindful of the information you share. Remember that any data you provide can be saved and potentially accessed later.

Be Cautious Avoid sharing sensitive personal details unless absolutely necessary.
Respect Privacy Ensure that any information related to students or other individuals is kept confidential.
Understand Data Use Be aware of how your data might be used and stored by AI systems.

By following these guidelines, we can ensure a safer and more secure environment for everyone at Florida Atlantic University.

There are four classification levels of institutional data at Florida Atlantic University. Institutional Data is categorized into data classifications as defined in Policy 12.7: Management of Institutional Data to ensure proper handling and sharing of data based on sensitivity and criticality of the information.

Tip: Data may fall into multiple classification levels. Such data may include Social Security Numbers included in Level 1 Health Information.

Highly Sensitive Information (Level 1 Information)

Level 1 Non-Health Information is highly sensitive information that may be used to open or access financial accounts belonging to another individual. This information includes personal identifiers and other information that can be used in conjunction with a person's name to open a financial account.

EXAMPLES

  • Social Security Numbers
  • Bank Account Numbers
  • Passport Numbers
  • Credit Card Numbers
  • Driver License Numbers

Sensitive Information (Level 2 Information)

Level 2 Information is classified as confidential information that the University has an obligation to protect under law or regulatory requirements not covered in Level 1 Information. This includes, but is not limited to, information defined under FERPA and the Gramm-Leach-Bliley Act (GLBA).

EXAMPLES

  • Student records
  • Web server access logs
  • Data protected by regulation
  • Research data with CUI
  • Non-disclosure agreements

Security-Related Information (Level 3 Information)

Level 3 Information is information that would adversely affect the institution's physical or cyber security if disclosed but may not necessarily be protected by the University's obligations under law or regulatory requirements.

EXAMPLES

  • Detailed Building Diagrams
  • Risk Assessments
  • Fraud Procedures
  • Internal Security Procedures
  • Police Procedures

Non-Sensitive Information (Level 4 Information)

Level 4 Information is any information that is created and stored during the normal course of business that is not protected by law or any other obligations of the University.

EXAMPLES

  • Course catalogs
  • Directory listings
  • Public websites
  • Published Research
  • University-wide policies
  • Job postings
  • Press releases