Thank you Glenn,
Is encryption of client data something you might be considering? I understand, for example, that TalkTalk did not consider it necessary, but events seem to indicate otherwise.
I believe you are correct that it is not a requirement of DPA. However, I operate a server which contains sensitive customers data, protected in much the same ways as I'm sure your's are, and have made the decision to encrypt all client data, just in case the server were to be compromised.
I believe it is a worthwhile safety step.
↧
Data Safety and Encryption
↧