If you require people submit information to you via a digital service, you must make sure the options you give them align with the data classification for that information. We recommend you speak with your department privacy and security leads to ensure the options you choose are appropriate.
The Government of Yukon has 4 data classifications
Restricted
Restricted information is highly valuable, highly sensitive information. External legal and or contractual requirements dictate the level of protextion required. Only authorized employees, contractors, and business partners with a specific need should access this data.
What happens if you don't manage restricted data appropriately?
If external or internal unauthorized parties access this data it could:
- negatively affect the government's legal position;
- violate regulatory requirements;
- damage the government's reputation;
- violate the government's contractual requirements; and
- create the risk of identity theft.
Confidential
Confidential information is highly valuable, sensitive information. The Goverment of Yukon Potential Impact of Loss determines the level of protection required.
What happens if you don't manage confidential data appropriately?
If external or internal unauthorized parties access this data it could:
- negatively affect the government's legal position;
- violate contractual requirements; and
- expose the geographic location of individuals.
Internal use
Internal use information originates or is owned by the government, or entrusted to it by others. This information may be shared with authorized employees, contractors, and business partners who have a business need. I may not be released to the general public, due to the negative impact it might have on the government’s interests.
What happens if you don't manage internal use data appropriately?
If external or internal unauthorized parties access this data it could:
- damage the government's reputation; and
- violate the government's contractual requirements.
Public
Public information is information that has been approved for release to the general public. It is freely shareable internally and externally.
What happens if you don't manage public data appropriately?
If external or internal parties access this data there are no risks to business operations.