PAKISTAN CLOUD FIRST POLICY Annex D – Data Classification Guidelines This policy lists the following five simple classes of data. Data classification standards are governed by appropriate data classification guidelines of the Government of Pakistan. a. Open Data Publicly available data structured in a way that the data is fully discoverable and usable by end users is called ‘open data’. The implementation of open data principles in the public sector makes the government open and accountable and increases citizen participation in government. The PSE classifying any data as Open Data must share the criteria with Cloud Office. b. Public data Data related to the public sector that is non-confidential and is publicly available. c. Restricted data Data related to public sector business, operations, and services which even if publicly available but a compromise of which can undermine the reputation of Pakistan internationally. d. Sensitive/Confidential data Information not intended to be published, which shall be accessed only by certain people having proper authorization and which justifies moderate protective measures. ▪ Phone numbers, registration numbers (BVN, vehicle, etc.), passport, etc. ▪ Information that contains at least one personally identifiable information (PII) like name (first and last), address, biometrics, etc. ▪ Data classified as “confidential” and, perhaps, certain categories of “secret” data (e.g. Obsolete or archived “secret” information). ▪ Information accessible through Intranet only, but available to broadly defined categories of authorized officials and public servants. Drafts of laws and regulations that are not yet in the public domain. e. Secret Secret information requiring the highest level of protection from serious threats, whose breach will likely cause threats to life or public security, financial losses, serious damage to public interests, etc. ▪ Lead directly to widespread loss of life. ▪ Threaten directly the internal stability of Pakistan or friendly nations. ▪ Raise international tension. ▪ Cause exceptionally grave damage to relations with friendly nations. ▪ Cause exceptionally grave damage to the continuing effectiveness of extremely valuable security or intelligence operations. ▪ Cause long -term damage to the Pakistani economy. ▪ Cause major, long-term impairment to the ability to investigate or prosecute serious organised crime. Page 19 of 21