RE: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question
| From: | tedd | Date: | Thu, 12 Aug 2010 14:30:17 +0000 |
| Subject: | RE: [PHP] Storing Social Security Number WAS: Encryption/Decryption Question | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-307415@lists.php.net to get a copy of this message | ||
At 2:51 PM +0100 8/12/10, Ashley Sheridan wrote:
If you are storing the data in a DB, then I'd consider using different levels of access to that via different DB users, which should offer an extra layer of security in protecting the data.Of course, the routines I'm writing provide several levels of access for different functions/job-duties. However, at some point there will be people who will have access to SS# data. The real questions here are: 1. Is it lawful in the USA to store US SS# in an online database? 2. If it is lawful, then what security provisions are required? Cheers, tedd -- ------- http://sperling.com/