Don’t over-react – redact!

Most recently,  it was the turn of the Ministry of Defence to be involved in a data leak outrage, when a basic security error led to data about nuclear submarines being exposed. While this type of school boy error isn’t new, it should be easy for organisations to prevent, if they took the time to learn – and train staff -  about the difference between blacking out sensitive information, and redacting it.

Speech and imaging company Nuance Communications is proposing that companies implement a ‘Redaction Policy’, designed to stop this very type of leak. It has boiled the policy down to four key points:
•    Understand the law, by providing staff with rigorous instruction relating to the requirements of the Data Protection  Act.
•    Understand what needs to be hidden. While this will vary by sector, staff need to know what can be shared and what can’t be shared under the terms of the Data Protection Act.
•    Explain to staff responsible for removing information from documents, about the fundamental differences between merely blacking out information, and redacting it.
•    Understand which document imaging solutions include redaction as standard, and the strength of the redaction they offer.

The Information Commissioner’s Office has the power to fine businesses up to half a million pounds for data loss and DPA breaches. That – in conjunction with the loss of face that comes with sensitive data falling into the wrong hands – is compelling enough to make public and private sector organisations, including law firms, financial services, education, healthcare, marketing and sales among others, ensure the effective redaction of sensitive data, to help prevent data leak incidents.

More information about solutions from Nuance that help with redaction can be found here: http://www.nuance.co.uk/news/20110411-eppo.asp