Securing your data when it is on the move

Computer security, securing your network, and data protection are all things you take seriously; and you already have a secure store for your company information and your customers’ personal data. But what do you do when you need to send information to someone else? Send it over email or use a cloud solution such as Slack, Box or Dropbox?

As ever increasing numbers of us turn to solutions like this to share vital business data within, and outside, of our organisations, how can we be sure that we’re keeping that data secure? Also, how can we make certain that our actions are within the law?

Here are a few options:

Email

From web mail to hosted email and exchange, unless it’s encrypted email is not secure. Emails travel over the internet completely openly, like a postcard travels through the mail. So if you wouldn’t write it openly on a postcard, don’t put it in an email.

Cloud and remote backup and storage

Most cloud providers have privacy policies which allow their employees to read your data. If your customers wouldn’t be happy with that, you need to consider whether you should be using that provider.

Instant messaging

The message here is the same as with cloud providers – check the privacy policy. You’re looking to make sure that the messages are end-to-end encrypted and that nobody else has access. Signal and WhatsApp are good starting places. Slack is, for confidential information, a real no-no.

General data protection regulation

At present, United Kingdom law in this area is regulated by the Data Protection Act. However, on the 25th May 2018 the General Data Privacy Regulation will come into force across the EU. The UK will still be a member, so it will apply here as well and will need all organisations who collect or process personal data to do more than they do now to safeguard their employees and customers’ personal data.

Ensuring that information is safe when it is on the move is an important part of keeping to the new law. For more information and guidance on data protection and security, contact us today.