How A Business Can Protect Its Most Valuable Asset

07-21-2006
Contact: Glen Loyd
608-224-5007

As more and more consumers become victims of ID theft, they make their choice of where to do business dependant on privacy protection.

Businesses careless with consumer information may lose their most valuable asset -- the customers themselves.

Janet Jenkins of the Wisconsin Office of Privacy Protection has information that can help a business and its customers:

• A new state law requires businesses to notify individuals in certain circumstances if their personal information has been lost, stolen or otherwise compromised.
• ID theft victims are entitled to a free-of-charge copy of the business transaction relating to their ID theft.
• Businesses must provide records to an investigating law enforcement agency.

Protecting customers:

• If you don't need information such as an address, email and phone number, don't collect it.
• Social security numbers are confidential and are only required for employment, investments and tax reporting.

Personal information should be private.

• Can people standing in line at your store or office overhear others giving their telephone numbers or account passwords? Instruct employees who need to collect information to talk in a discreet and quite manner.
• Turn computer screens so they can't be viewed by anyone other than the operator.
• When customers are making a purchase, ensure they have privacy to securely enter their pin numbers.
• Staff should verify that customers are who they say they are by checking photo IDs and signatures. Consider using equipment that truncates debit /credit card numbers when printing receipts.
• Paper records with personal information should be locked up. Computers should be password protected. Develop and implement rules about taking home laptops and protecting them.
• Screen and train employees.  Use background checks.
• All credit card information including pre-approved credit card applications and other ID documents should be shredded.

Create an action plan to respond to a data breach:

• Fast action can help reduce potential damage...investigate internally and devise a plan for notifying customers.
• Notify law enforcement agencies as soon as you are aware that information is missing or compromised.

To learn more, contact the Office of Privacy Protection at 1-800-422-7128.

###