Nevada makes data encryption compulsory
Category: Data compliance
2 October, 2008
Unencrypted personal details cannot be sent via email between businesses, under a new law that has come into effect in Nevada.
Individuals who have their personal details lost now have to be notified as part of the data breach notification law, if the information was not encrypted.
Businesses do not have to encrypt information stored on servers,
backup solutions and laptops however.
Arguments could arise that the UK should enact such a law after recent
data security breaches widely reported in the media.
One in five workers do not trust employers to protect confidential details, while one in four managers admitted that they had taken such information out of the office, life assistance firm CPP reveals, which further throws into light the
data compliance policies of companies.
"Employers have a responsibility to protect their staff, yet it seems a week doesn't go by without a company or government department reporting a loss of data," identity theft expert at CPP tells the Press Association.
Businesses could improve their
data compliance practices by ensuring that experienced staff are fully trained and investing in good quality data security software and
backup solutions, which could potentially prevent loss of profit if an incident should occur.