Data Classification-Sensitivity Labels

	Public	Internal	Confidential
Document Affect	None	Inserts footer in document Required HLG authentication Autosave Feature disabled in desktop tools	Inserts footer in document Requires authentication Autosave Feature disabled in desktop tools
Email Effect	None	Encrypted only	Encrypted only
Description	Information in the public domain	Information not approved for general circulation outside the Group where its loss would inconvenience the Group or management but where disclosure is unlikely to result in financial loss or serious damage to reputation	Information that, if made public or even shared around the Group, could seriously impede operations and is considered critical to ongoing operations.
Examples	Prospectus, programme, and course information Pay scales Published information released under the Freedom of Information Act Flyers and publicity leaflets Public Policies	HLG Policies How to Guides for systems Teaching materials Timetables Internal Reports Performance Board Papers Building Plans Information about HLG’s Infrastructure Meeting Minutes Learner results Staff newsletters	Budget Packs Payroll Trackers Local admin trackers Group Profiles Risk Assessments Safeguarding Tracker Cause of Concern Log EHCP’s Staff Performance Management Enrolment Forms Financial Spreadsheets Confidential communication via email with parents Disciplinary reports Payroll Documents with student or staff personal data
Risk	Low	Low - unauthorised disclosure would not significantly impact the Group, or any of its learners or employees.	High - unauthorised disclosure could result in significant adverse impact or penalties to the Group, or any of its learners or employees.
Access Control	Available to the general public.	Generally available to all staff on a need to know basis.	Must have a business need to know the information.
Release to third parties	Available to the general public and for distribution outside of the organisation.	Intended for use only within the organisation.	Access limited to a need to know basis and not to be released externally, unless in accordance with specified policies and procedures on release of information.