UW–Madison will retire its data classification policy (UW-504) on January 1, 2027 and follow Universities of Wisconsin policy SYS 1031, which classifies data as Low, Moderate, or High Risk. The Data Classification Initiative is preparing campus for that transition. Here is what happened last quarter and what is coming next.

What happened

Training working group kicked off 

Chaired by Jeffrey Micheal Thomas (OHR Learning and Talent Development), the group is reviewing existing materials such as Data@UW and cybersecurity awareness training, and will develop a training and awareness strategy tailored to data stewards, principal investigators, and general data users. The group plans to pilot that strategy ahead of the January 2027 transition and measure its impact against the baseline survey from the Discovery phase.

Research Data working group kicked off 

Chaired by Claire Dalle Molle (Office of Compliance), the group is focused on helping principal investigators classify the research data they steward. It will refine the researcher classification guidance, identify campus subject matter experts who can field research data questions, recommend how UW-4032 (Data Stewardship) might better reflect classification responsibilities, and provide research specific recommendations to the Training working group.

Researcher classification examples, version 2, out for feedback 

The draft Data Classification Guide for UW–Madison Research Data is linked from the initiative website and has already been revised once based on feedback received. It provides High, Moderate, and Low Risk examples specific to research, along with other factors, such as contracts, regulations, and intellectual property, that can change how data must be handled. Feedback is still enthusiastically welcome through the form on the guide.

Policy Library page updated 

The UW-504 page in the UW–Madison Policy Library now notes that the policy is being retired and that UW–Madison will follow SYS 1031 beginning January 1, 2027. 

What’s next

Data label taxonomy for feedback

The Schema Augmentation and Systems Integration working group, chaired by Tom Jordan (DoIT AIS), has drafted a set of data labels to complement the three SYS 1031 risk levels. Risk level alone does not say what data is about or which rules govern it, and the labels are meant to add that context so systems and people can handle data appropriately. The group will be seeking feedback on the proposal this quarter.

Decision tree exploration

The initiative is exploring a decision tree tool that walks users through a series of short questions to arrive at a likely classification for their data, with data stewards retaining the final say.

Website publication

A new Data Classification at UW–Madison website is in draft. It organizes guidance by role (researchers, faculty and staff, data stewards, IT staff, managers and supervisors, student employees) and by task (classify, handle, store, share, find training, get help). It will also house the classification examples for researchers, administrative staff, and instructors, along with guidance on access and sharing, storage, and retention.

New Policy Library page (Info-118) drafted

Info-118 will replace UW-504 in the Policy Library and direct UW–Madison to follow SYS 1031.