AI & University Data
As AI becomes increasingly integrated into teaching, learning, research, and daily operations, protecting University data remains essential. In accordance with Executive Memorandum 42, institutional and research data must be classified and protected based on its risk classification and may only be entered, uploaded, processed, analyzed, generated, stored, or transmitted using University-approved AI technologies. Understanding the data you work with, the risks associated with AI, and the requirements for handling University information helps ensure the safe, secure, and responsible use of AI across the University.
Low Risk Data
Low risk, public information and data CAN be used within free, paid consumer (non-enterprise), and enterprise AI tools. While many course materials are considered low risk, copyright and intellectual property laws should still be considered.
Medium Risk Data
Medium risk information and data may ONLY be used within enterprise AI tools. Medium risk information used within enterprise AI tools should be unidentifiable or receive prior approval by ITS or other necessary entities.
High Risk Data
High risk information and data may NOT be used within free, paid consumer (non-enterprise), or enterprise tools. Those requesting to use high risk information or data within enterprise AI tools will need prior approval.
Stay informed. Smart choices start here.
Learn more about
Generative AI
The table below outlines what types of information may be entered into each type of tool.
| Data Type | Data Examples | Risk Classification | Free Tools | Paid Consumer | Enterprise Tools |
| Public Data | Anything publicly available on the web | Low Risk | Yes | Yes | Yes |
| Institutional Data (Non-Sensitive) | Public policies, handbooks, etc. | Low Risk | Yes | Yes | Yes |
| Student-Generated Learning Materials | Student lecture notes, reading summaries, etc. | Low Risk | Yes | Yes | Yes |
| Educational Materials | Readings, publisher or faculty PowerPoints, etc. | Low Risk | No* | No* | Yes |
| Institutional Data (Medium Sensitivity) | Internal memos, budgets, etc. | Medium Risk | No | No | Yes |
| Anonymized Research Data | Identifiable information removed, other information generalized, etc. | Medium Risk | No | No | Yes |
| Institutional Data (Sensitive) | Social security numbers, credit/debit cards, student health data, employeee W-2, etc. | High Risk | No | No | No |
| Raw identifiable Research Data | Identifiable human subject data | High Risk | No | No | No |
* Copyright and intellectual property right concerns.