I used Bestcrypt volumes 15 years ago with great success because the data
was being transported around on laptops which could be lost or stolen. Not
that the data was all that sensitive but rather commercially sensistive.
Given that you are not keeping peoples mental health records or criminal
records or financial information then you need to balance the value of the
data with the effort to keep it private.  Firstly, no one is likely to even
want your data. Secondly, by using an encrypted volume no-one could read
your data easily and thirdly you wont need to do anything to your VFP app.

privacy data legislation is an odd one.  The govt demands access to ALL your
data but in the name of privacy demands YOU deny access to that data to
everyone else including people with a need-to-know.

-----Original Message-----
From: ProFox [mailto:[email protected]] On Behalf Of Christof
Wollenhaupt
Sent: Thursday, 13 March 2014 8:29 PM
To: [email protected]
Subject: Re: Encryption

>
>  # use a truecrypt volume
>

That's a good suggestion. BitLocker would be another option. To protect
against theft, it's a lot more secure to completely encrypt the drive
instead of individual files and make unencrypted copies of them.

To control access it's easier and safer to simply use Windows permissions.
Let the charity create a user group for those that are allowed to process
sensitive data. Give this group access to your member table and do not allow
anyone else to access the file. Make sure your application handles the
"Access denied" error message that you will get without permission.

The charity needs to do some work, as well, like documenting processes and
establishing a regular audit.

--
Christof


--- StripMime Report -- processed MIME parts ---
multipart/alternative
  text/plain (text body -- kept)
  text/html
---

[excessive quoting removed by server]

_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: 
http://leafe.com/archives/byMID/profox/[email protected]
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to