In response to the European Union’s General Data Protection Regulation (GDPR), NYU IT has replaced two of its data-centric policies (Data Classification Table and Reference for Data and System Classification) with a new Electronic Data and System Risk Classification Policy.