Data classification worksheet¶
Planning aid, not a certification or legally sufficient compliance document. Complete in an approved private documentation location. Never insert credentials, key material, or actual restricted records. Unknown required controls block approval.
- Project / nonsensitive identifier: [fill in]
- Prepared by / accountable owner: [fill in]
- Version / date / next review: [fill in]
- Classification and agreement references: [fill in]
- Approved evidence location: [fill in]
Inventory and classification¶
| Dataset / version | Source / custodian | Fields and identifying geography | Institutional classification | Rationale / obligations |
|---|---|---|---|---|
| [fill in] |
Purpose and minimization¶
- Authorized scientific purpose and prohibited uses: [fill in]
- Minimum fields, records, geographic precision, and dates: [fill in]
- Direct identifiers removed or separately held: [fill in]
- Linkage keys, indirect identifiers, and custodian: [fill in]
- Risks when combined with project or public datasets: [fill in]
- Likely output classes, models, and disclosure risks: [fill in]
- Required locations, access conditions, and retention: [fill in]
- Proposed storage, transfer, and compute environment: [fill in]
- Permitted here, pending, or requires another environment: [fill in]
Review and authorization¶
- Unresolved controls / remediation owner / due date: [fill in]
- Exceptions, approving authority, scope, and expiry: [fill in]
- Custodian decision / date / evidence reference: [fill in]
- Institutional decision / date / evidence reference: [fill in]
- Provider confirmation references: [fill in]
- Material changes requiring revalidation: [fill in]
For each control, record Supported, Configured, Verified, and Approved separately, with dates and evidence. Do not mark unknown as passed.