Re: sensitive data

[James Lampert <jamesl@xxxxxxxxxxxxxxxxx>]

Richard Reeve wrote:
> Build some field level security in to the application...........
>
> Booth Martin <booth@xxxxxxxxxxxx> wrote:  Do not include personal identifying information in a non-sensitive file.
>
> Lim Hock-Chai wrote:
> > Just want to know how other handle file that contains both sensitive and
> > non-sensitive data field. For example, Customer-Billing-Info Master
> > file might have Billing Address fields (Non-Sensitive Data) and Credit
> > Card field (Sensitive data). Do you create special Service Program to
> > access those field, using field level auth...?

. . . and also restrict access to the file itself, so it can't simply be 
viewed with a utility, and have the programs that legitimately access 
the data use owner (or adopted) authority to do so.

And billing address data might very well be sensitive, depending on who 
you're billing. In some cases, it might even be more sensitive than the 
credit card number.