FTC Guides Businesses in Safeguarding Personal Information

“Information security cannot be an afterthought for businesses,” said Majoras. “Consumers expect and deserve to have their sensitive personal information kept secure.”

“Protecting Personal Information: A Guide for Business,” available at www.ftc.gov/infosecurity, is built around five simple phrases:

TAKE STOCK. Know what personal information you have in your files and on your computers.

SCALE DOWN. Keep only what you need for business.

LOCK IT. Protect the information you keep.

PITCH IT. Properly dispose of what you no longer need.

PLAN AHEAD. Create a plan to respond to security incidents.

The plain-language guide includes checklists to get businesses thinking about the kind of data they collect, how they store it, and who they share it with. It offers solutions for determining what needs to be kept, how to secure it, what to get rid of, and how to properly dispose of it. The guide also instructs businesses in the basics of creating a plan for dealing with a security breach, in the event one does occur.

The FTC works for the consumer to prevent fraudulent, deceptive, and unfair business practices in the marketplace and to provide information to help consumers spot, stop, and avoid them. To file a complaint in English or Spanish or to get free information on any of 150 consumer topics, call toll-free, 1-877-FTC-HELP (1-877-382-4357), or use the complaint form at http://www.ftc.gov . The FTC enters Internet, telemarketing, identity theft, and other fraud-related complaints into Consumer Sentinel, a secure, online database available to more than 1,600 civil and criminal law enforcement agencies in the U.S. and abroad.