Classifying your data

The question every user asks before uploading a document is always the same: am I allowed to entrust it to Learnya? A simple classification answers it once and for all. It avoids the two extremes, forbidding everything out of caution or entrusting everything out of habit.

• Public: what is already published or meant to be. No restriction.
• Internal: the organisation’s day-to-day work. Entrusted to Learnya in the Swiss cloud, in line with the acceptable use policy.
• Confidential: contracts, personal data of clients or staff, unpublished figures. Entrusted within a project reserved for the people concerned, with a review before anything goes out.
• Sensitive: health data, data on opinions, religion, criminal proceedings or social assistance, genetic and biometric data. Processed only in the deployment mode and under the framework decided for them.

The last class covers the sensitive data defined in Article 5 of the Federal Act on Data Protection. Processing it calls for more precautions, and often an impact assessment. For this data, the desktop app working on local files, or an installation on your own servers, may be the right choice.

A class is only useful if it says what to do. For each one, write in a single line where the data may go, who may access it and what must be reviewed. Keep these rules in the acceptable use policy, where teams will find them.