UK Anti-Doping takes the management of the data that it is trusted with very seriously. Due to this, the organisation have adopted the Government Protective Marking Scheme (GPMS).
The GPMS is a method for classifying data in order that the appropriate handling and security controls can be applied consistently. Data is classified according to the expected impact of deliberate or inadvertent public disclosure. Documents or correspondence are marked with the following categories accordingly:
- Not Protectively Marked – information suitable to be shared in the public domain.
- Protect – commercially sensitive but not personal data. May be shared via e-mail with care.
- Restricted – highly commercially sensitive and/or personal data. If e-mail transfer is required, secure or encrypted systems should be use.
In addition, the category Protect – HR/Finance/Legal/Operations is used when personal data is required to be sent via e-mail but encryption is not possible. In this case, the data may be sent to a non web-based e-mail address belonging to the person to whom it relates.
These handling guidelines apply to all physical documentation, e-mail and removable media (e.g. data USB keys).
As an exception, documents may be unmarked when information originating from an external source should be marked by the originator.
The aim of the marking system is to ensure a considered balance between security and availability of data as appropriate.
If you would like any further information on the use of the Government Protective Marking Scheme by UK Anti-Doping, please contact ukad@ukad.org.uk.
