Davidson College maintains a Data Classification and Security Policy to identify categories of data that Davidson owns, hosts, stores, processes, or is otherwise responsible for protecting, and set expectations and restrictions for the storage, dissemination and protection of data by category. This article is a summary of those data categories.
AI and Davidson Data
Free, unlicensed generative AI tools like ChatGPT and Copilot use your chats for further training data. Anything entered can be potentially reproduced by the AI in other chats. Once data leaves Davidson’s control, its future use becomes uncertain. Davidson is obligated by law and policy to protect certain types of critical data.
Only public data can be used in free AI tools. Davidson-owned data that are classified as Internal or Restricted may not be used in AI tools, unless that tool was approved and purchased by T&I, such as Gemini, Amplify, or a Davidson-paid ChatGPT/Claude license. Confidential data may not be used in any AI tool without explicit permission from T&I Information Security.
See the Types of Data Summary section below for an overview of these classifications and the Data Classification and Security Policy for detailed information on this topic.
Review AI and Davidson Data Training Slides [Davidson Login Required]
Types of Data Summary
Public Data
Anything that could be found publicly, such as info posted on the main college website.
Data Usage: Public data can be used in any Davidson-approved technology service. Public data is ok for public tools, including AI tools.
Examples: Davidson events, Team rosters
Internal Data
Anything not actively shared publicly, but shared widely (behind login) among Davidson students and employees.
Data Usage: Internal data can be used in Davidson-approved technology services that require a Davidson login. This includes Davidson-licensed AI tools including Amplify and Google Gemini.
Examples: Some campus policies, Floor plans
Restricted Data
Sensitive information that might embarrass or upset people if exposed, but that has low legal liability.
Data Usage: Restricted data can be stored in Google Drive, Moodle, Banner, Etrieve, Blackbaud CRM, Office 365 email (use caution), and any other Davidson IT service authorized for Restricted data. This includes Davidson-licensed AI tools including Amplify and Google Gemini.
Examples: Employee salaries, departmental budgets, most FERPA data
Confidential Data
Data which we’re required by law or contract to keep absolutely private.
Data Usage: Confidential data may only be stored in Banner, Etrieve, Blackbaud CRM, approved campus file servers and specially-requested Google Drive shared drives with special access rights not synced to workstations. Confidential data may not be used in any AI tool without explicit permission from T&I Information Security.
Examples: Social Security Numbers, financial aid data, student and parent tax or financial info, Title IX, and student health information