...
-- berkeley -- policy driven by specific data items; wants to see development of "categories of data "
-- osu -- have different classifications, policy written in terms of classes
data owner responsible for classifying data into a class; triggers protection characteristics (can it be public, how its protected on servers)
...