New Nevada Law Explicitly Requires Organizations to Encrypt Personally Identifiable Information Sent Through Networks

To date there have been several laws that direct organizations in certain industries to consider using encryption as one way to protect data based upon the organization's considered risks, and laws that make encryption a factor in decisions regarding breach notifications, but until now no laws we are aware of explicitly required personally identifiable information (PII) to be encrypted. The state of Nevada has now changed that!

Nevada NRS 597.970,"Restrictions on transfer of personal information through electronic transmission," goes into effect October 1, 2008.

What if you do not have customers or offices in Nevada? Well, recent history shows us that once one state enacts a specific type of data protection law, such as for breach notifications or credit freezes, many other states are not far behind in following suit. Chances are other states will soon be jumping on the PII encryption law bandwagon.

For the entire article - www.realtime-itcompliance.com

State of Nevada Site - Legislature State of Nevada

PaperClips' solution

The eM4 Service is a new paradigm. It exceeds user expectations on meeting compliance while minimizing change and expense. Users continue to send emails as they do today, the only thing they'll notice is the reassuring message tag indicating that their email was protected by eM4.

is currently protecting the emails of hundreds of companies, who have collectively sent thousands of emails.
Site Map