Better Business Bureau
Start With Trust
Data Security — Made Simpler
Data Security Guide
- 1. Securing Sensitive Data
- 2. Monitoring & Transmitting Financial Data
- 3. Becoming 'PCI Compliant'
- 4. Disposing of Data
- 5. Data Security and Your Customers
- 6. Spotting Identity Theft
- 7. What To Do If Consumer Data Is Stolen
- 8. Global Enterprises Data Security Issues
- 9. Responding to Third Party Data Requests
- 10. Common Technical and Legal Terms
- 11. About Our Topic Experts
- Home
- Data Security
- 9. Responding to Third Parties' Requests for Data
9. If Third-Parties Request Your Data. How to Respond.
Before providing any consumer information to a third-party you should make sure that they are actually authorized to have that information.
Getting Started
Here are some guidelines to help you — and your employees — determine who is — and who is not — authorized to obtain personal information about your customers.
- Requests From Your Customers
In general, customers are authorized to find out what information you keep about them. - Requests from Individuals Connected with Your Customers
- Requests from the Government
If you receive a request from your state or the federal government to obtain personal information about your customers, and your customers have not consented to that request, consult your attorney. - Requests from Other People
In This Chapter
Only 35% of small businesses provide training to employees about Internet safety and security.
Source: 2009 National Small Business Study, National Cyber Security Alliance & Symantec.