CT Dems Propose Mandatory Encryption of PII for Insurance Companies

Press Release from the Connecticut Senate Democrats.

Encryption has an important role to play in safeguarding sensitive information, but it is far from a panacea, and it has significant operational implications. Key manage is extraordinarily difficult to do. Encryption impacts performance. It’s often impossible to implement on legacy systems. Encrypting all personal information is a waste of resources; limit encryption to sensitive personal information. The data is still vulnerable at many other points in the processing lifecycle. You can’t process encrypted data (e.g., run your big data algorithms).

Understand the data you have. Classify it. Understand the risks and threats. Protect it accordingly.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s