| Title: | Protect Private Data With A Privacy Wall |
| URL: | http://www.rimmkaufman.com/rkgblog/2007/02/26/protect-private-data-with-a-privacy-wall/ |
| Printed: | February 9, 2010 |
| Source: | The Rimm-Kaufman Group Blog, info@rimmkaufman.com |
- February 26, 2007
- 0 comments
The smart folks over at Wesabe describe a neat idea for protecting private data in a database. They call it the “privacy wall”.
In a nutshell: don’t keep private data (credit cards, SSNs, medical records, etc) keyed to users; rather, key these data from a hash of the username and password. This means one needs a username/password to match any secret data back to any individual.
If hackers managed to compromise such a database, they’d end up with gigabytes of disconnected facts, making identify theft much more difficult.
Most online retailers have poor security practices (for example, experts advise never storing credit card numbers; most online retailers do).
Barney Frank, Chairman of the House Financial Services Committee, is proposing legislation to hold retailers more accountable for data breaches.
Tightening up your data security procedures makes good business sense, even if not yet required by law. The privacy wall concept is worth considering.
If you like this post, consider subscribing to our RSS feed. You can also have new posts sent to you via email.
Related Posts
- Staying Private, II Could an increased interest/awareness of online privacy harm online advertisers by hampering their ability to track? No, I don't think so. ...
- Staying Private The EFF has an interesting post on How To Keep Your Search History Private....
- Google Held To Higher Privacy Standard? Matt Cutts and Tim O'Reilly note that Google is being held to a higher privacy standard than other firms who have far far more data...
- ProQuo, A Ventured-Backed For-Profit Privacy Company ProQuo is a venture-backed company hoping to profit from consumer opt-outs and opt-ins....
No Comments Yet
Your comment will be first!
Your Comment