In a nutshell, every business, nonprofit or other organization that requests private identification numbers
- Social Security numbers
- health insurance numbers
- driver's license numbers
- credit card numbers, etc.
must encrypt them on their systems, limit access to them by employees who are in a need-to-know status, and post a policy on their website, intranet and on employee bulletin boards saying this is their policy.
To download my white paper on ways to implement this law and to protect yourself from most breaches, go to: http://marchalpert.googlepages.com/whitepaper_new_law_in_ct_01oct08.
Please feel free to share with others.
No comments:
Post a Comment