Data Classification

Classify data to determine handling:

Classification	Examples	Handling Requirements
Public	Aggregated program reports (no identifiers).	Minimal protection; share freely.
Internal	General operational emails.	Access limited to AHEEN staff.
Confidential	Student contact details, program evaluations.	Encryption required; access on need-to-know.
Highly Sensitive	Biometric/health data of refugees/IDPs.	Strict minimization; DPIA mandatory; no cloud without safeguards.