Follow Kara Linkedin Twitter Facebook
Email Kara Email
Legal Issues
Feb 15, 2016

Step Two Of Your Cybersecurity Plan: Collect Only Necessary Personal Data

Sponsored Content provided by Kara Gansmann - Attorney, Cranfill Sumner & Hartzog LLP

In returning to our cybersecurity series, the second of five keys to a sound cybersecurity plan considers collecting only the personal data that is necessary to your business’s needs. Recall that personal data generally includes a person’s name in combination with other identifying information.
 
The rule of thumb is that if you do not have a legitimate business need for certain personal data, you should not keep it or even collect it. If your business has a legitimate need for collecting certain personal data, the best approach is to keep that data only as long as it is necessary to conduct your business transactions and as long as the law requires.
 
A few examples for following this second step include the following:

  • Check the default settings on your software that processes transactions and credit card numbers because sometimes software is preset to permanently store information.
  • Ensure that electronically printed credit and debit card receipts contain no more than a few digits of a card number and that the expiration date is not printed.
  • Do not retain customer credit card numbers, expiration dates or other personal information gathered from the magnetic strips on credit cards without an essential business need for it. Retaining this information, or keeping it longer than necessary, increases your risk for the information to be used to commit fraud or identity theft. Once your business need is over, properly dispose of it.
  • Use Social Security numbers sparingly and only for lawful purposes like reporting employee taxes. While this advice may seem obvious, you may remember a time when your Social Security number was also your driver’s license number.
  • If your business needs or the law requires that you keep personal data, develop a written records retention policy to identify what information to keep, how to secure it, how long to keep it, and how to securely dispose of it.
Scaling down the personal data your business collects and keeps will help minimize your liability exposure in the event of a data breach.
 
Kara Gansmann, a North Carolina native, is an associate in Cranfill Sumner & Hartzog LLP’s Wilmington office, where she focuses her litigation and appellate practice on various aspects of labor and employment law, business and contractual disputes, medical malpractice, and HOA matters. To contact Kara Gansmann, call (910) 777-6055 or email her at [email protected].
 

Other Posts from Kara Gansmann

Wbj insights revised 0510 121615113531
Ico insights

INSIGHTS

SPONSORS' CONTENT
Burrus rob headshot 300x300

Entrepreneurship In A Pandemic: From CSB To Business Partners

Robert Burrus - Cameron School of Business - UNC-Wilmington
Headshot2 3182020512

Are Back-Up Generators A Necessity In The South?

Chris Jones - Green Dot Heating & Air
Drewsmith copiersplus headshot

What Should I Be Paying For A Copier Contract?

Drew Smith - Copiers Plus

Trending News

Verizon Call Center: Most Employees Working From Home Permanently

Cece Nunn - Aug 13, 2020

Three Wilmington Companies Rank On Inc.'s Fastest-growing List

Jenny Callison - Aug 13, 2020

Riptide Builders Takes Charge Of Last Undeveloped Land In Sea Trail

Cece Nunn - Aug 14, 2020

After Months Of Closure, Planet Fitness Now Among Area's Open Gyms

Christina Haley O'Neal - Aug 14, 2020

On Wilmington's Pointe 14 Movie Theater, A Q&A About The Pandemic's Impact

Cece Nunn - Aug 14, 2020

In The Current Issue

NCino 'on Fire'

When the dust cleared on July 14, nCino, which had $138 million in revenue in its most recent fiscal year, was valued at close to $7 billion...


Catching Up With Businesses

Starting in March, the Business Journal featured area businesses and how they are adjusting operations, innovating and coping in general wit...


Major Project Would Impact Southport

The developer of River Place in downtown Wilmington is partnering with Bald Head Island Limited on a nearly 400-acre development dubbed Proj...

Book On Business

The 2020 WilmingtonBiz: Book on Business is an annual publication showcasing the Wilmington region as a center of business.

Order Your Copy Today!


Galleries

Videos

2020 Leadership Accelerator: Virtual Workshops for Real Leaders
2019 Health Care Heroes
August 26, 2019 Power Breakfast: A Healthy Sale?
2019 WilmingtonBiz Expo Keynote Lunch - CEO, nCino, Pierre Naude`