Privacy and Customer Data

Prevent Breaches and Ensure Privacy

The Payment Card Industry Data Security Standard (PCI DSS) and multiple federal statutes such as the Gramm-Leach-Bliley Act (GLBA), Health Insurance Portability and Accountability Act (HIPAA) and Sarbanes-Oxley (SOX), exist to protect customer data. More than 38 states have enacted local legislation to require companies to issue data security breach notifications to all individuals whose data may have been compromised in the event of a leak of personally identifiable information. But even with all these controls in place, more than 158 million records containing sensitive personal information have been involved in data security breaches since the beginning of 2005 according to the Privacy Clearinghouse.

The results of such breaches can be far-reaching. Organizations must not only bear the expense of fines and dedicated customer support operations, but also any resulting loss of shareholder and customer confidence, impact on reputation, brand, and stock market valuation, and even potential criminal penalties. Dealing with a data security breach is disruptive to business and can give competitors an advantage. It does not matter whether breaches are accidental or deliberate; what matters is that the organization is perceived to have failed in its duty to care for personal and confidential information.

Websense Data Security Suite preserves customer confidence and helps protect the company's competitive position by securing confidential data, including: social security numbers, account numbers, credit card numbers, employee records, medical records, claims submissions, legal documents and any other information deemed non-public.

Websense Data Security Suite is information-centric, protecting designated confidential data in any form and traveling through any communication channel to any destination, to ensure that data is available only to authorized users. Using Deep Content Control, Websense Data Security Suite provides automated policy enforcement for users and data, as well as destination control that integrates with existing business processes and helps ensure compliance with regulatory and corporate governance requirements.