Don’t Read The Interesting Stuff

It emerged that more than 600 HMRC staff have been disciplined for reading information about UK citizens that they shouldn’t have - unless they have a specific need to do so. I wrote about the decline of implicit trust a while ago and this is just another example. Of course it is impossible for people to avert their eyes if there is something sensitive on the screen - and human nature is always drawn to things that are interesting (just think of surfing the web and the tangents you follow). There is technology that can help in this instance…

Automated redaction technology has been around for a while - in essence this ‘hides’ interesting information from unauthorized eyes from within a document. For example it might hide names and addresses, or bank details - or tax return information.

With a database application, it is the application that need to be altered so that sensitive information is not displayed. Not only is it time to revisit who has access to applications but also exactly what information they have access to - and is it really necessary.

In the cases where information is needed to be viewed on occasion, then a well communicated corporate policy coupled with an on-screen question / warning followed by an audit trail works… That way people won’t be tempted to look at the interesting stuff that’s out there.

May 2, 2008 | Filed Under Application, Information Policy 

comments

Leave a Reply