The problem becomes much more difficult to avoid when it is a case of "insider" job. No matter how encrypted the data in the database, the "insider" (who sees the data on the screen in plain form anyway) will be able to misuse the data (or forward it to an "outsider" who does the dirty work for him).
elpidio On Friday 27 August 2004 09:12, matthew wrote: > This is not about HIPAA but theft. HIPAA was used to throw the book at > him, I dont care how HIPAA compliant you are if someone is dishonest > they will attempt to steal.. My problem is once the data was in the > database why was it not encrypted, especially the credit card cant they > be hashed or some other security feature put in place to prevent some > one from reading it off the computer screan. This appears to me to be > case of low tech theft. > > Matt ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_idP47&alloc_id808&op=click _______________________________________________ Care2002-developers mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/care2002-developers
