>Whether or not the data was copied this time, it's still a good idea to >insist, where possible, that all medical records use something other >than a social security number as ID, for when the files really are >compromised.
The right way to handle such data is to keep it in an encoded format all the time. Data is only decoded when it needs to be used and then immediately encoded again. That way when it is lost or stolen it is of no value. Should start our assuming that the data will be stolen at some time or other. ************************************************************************* ** List info, subscription management, list rules, archives, privacy ** ** policy, calmness, a member map, and more at http://www.cguys.org/ ** *************************************************************************
