The Data Risk Classification Policy applies to all members of the university community, as well as to 3rd parties who handle university data.