In modern-day society, almost everything is done over the internet. Signing a lease to rent out a home, purchasing a product, filling out a health care application, etc. Personal information is sent across the world wide web 24 hours a day 7 days a week. This is why it is very important to protect this private data from the wrong hands. There are issues that need to be addressed when it comes to storing this information. Where it should be stored? Who should be allowed to see it? What device should the information be stored on? How can the individual trust the source that is requesting the information?
When it comes to personal data such as social security numbers, health issues, and bank information the storage location matters. We don’t want the information to be stored in a computer that is easy to log into. Such as a lobbyist computer. Personal data needs to be stored in a computer that is constantly monitored and has many security policies in place. In a secured office where only certain people would have access.
Not everyone is a trusted individual. That is why it is important to set access control standards. With these standards, the only people who would have access to view personal information are the ones with a “need to know” classification. This means that the only people who can open the files are the people that have to know the information to complete a certain job. A doctor can not help a patient out with the ability to view the patient’s medical file. This will eliminate the chance of personal information leaking into the wrong hands.
No one would also want their information stored on random devices. For example, USB devices. Especially the ones that do not have any password protections. It is irresponsible to download the information on a personal flash drive to take it home. This raises many security concerns. Also, if the information is to be downloaded onto a CD to be archived It is important to keep the CD in a cabinet that is protected under a lock and key so that the information cannot be physically stolen.
With the number of websites there are on the internet how can someone know for sure which ones to trust? For starters, they can check the website’s certificate and make sure they are registered. It is also a good idea to provide the credit card info to a trusted third party like Paypal. So that way a website in question communicates with the third party instead to eliminate the chances of the credit card information getting in the wrong hands.