lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <s059c41e.023@kalamazoo.k12.mi.us> From: GettigAM at kalamazoo.k12.mi.us (Tony Gettig) Subject: Emailing SSN info Hi all, I work for a school district in the USA. Higher management wants to email a zipped data export (presumbably password protected) to a vendor that includes the Social Security Number for employees. I have advised them against this. Shipping a CDROM overnight would be more secure, IMO. Now they want to know if there are any laws pertaining to the emailing of SSN info. (Why they are asking me and not an attorney, I am not sure...though I AM going to tell them to speak to an attorney too.) Can any one point me to a website or cite specific US (or even state) laws regarding this? Even a reply telling me why this is a bad idea would be great. If I am wrong, I am glad to hear that too. Thanks in advance!
Powered by blists - more mailing lists