Re: Triple-DES algorithm on AS/400

[Mike Wills <koldark@xxxxxxxxx>]

Yes, that law.

IIRC, you have to encrypt data that isn't yours (I think it was CC #,
SSN and a couple others). If you have unencrypted data that gets
hacked into you have to report that to the people who's data has been
stolen. Now, you have to define "data that you don't own", but to
cover our butts, we are looking into this to conform to this new law.
Unfortunately, the vendor we use isn't going to support this, so we
will probably have to do some sort of hacked thing.

On Fri, 3 Sep 2004 10:00:10 -0400, Walden H. Leverich
<waldenl@xxxxxxxxxxxxxxx> wrote:
> >The problem with that is California's law... you have to encryt the
> >data in the database.
> 
> What California law? I assume you mean CA's Online Privacy Protection Act of 
> 2003, if you're talking about something else, never mind. If you are speaking 
> of OPPA can you provide details, I just re-read the law (it's only 4 pages) 
> and I don't see that requirement in there.
> 
> -Walden

-- 
Mike Wills
iSeries Programmer/Lawson Administrator
koldark@xxxxxxxxx
http://www.koldark.net
Want Gmail? Email koldark+gmail@xxxxxxxxx to get on my waiting list.