Re: Removing Sensitive Data from Paper Documents

[Chris Garriss <chris_garriss () UNC EDU>]

Blacking out, labels, white out...none of them really work.  Using an
alternative light source you can pretty well read the text on an
original - and sometimes a copy - all the time.  Personally I think the
only ways to truly remove the data is either physically cutting out the
"offending" items or using scanning software that lets you proactively
either mask or remove / excise data from the electronic copy.

On 26.10.2009 17:05  Ellen Smout spoke thusly:
> Hi Patty
>
> This issue arose for us in PCI.  We had many forms redesigned so that
> information can be cut off the bottom of the form and then shredded
> while other information on the form can be kept as needed.
>
> Permanent stickers could also be an option, you would have to sticker
> both sides.
>
> I am leery of scanning then removing, as that puts into scope systems
> that were not previously in scope of containing any sensitive data.
> These systems now have to be purged of sensitive data as well.
>
> Blacking out and then scanning is a good option, although it's a lot
> of work.
>
> thxs,
>
> Ellen
>
>
> Patria, Patricia wrote:
> > Is anyone aware of a technique that will allow you to modify a paper
> > record to make the personal identifying information unreadable while
> > keeping the rest of the document intact? Aside from cutting the
> > information from the document (which is not practical), are there
> > special markers, pens or white-out designed for this purpose?
> >
> >
> >
> > In an effort to comply with MA 201 CMR, we would like to remove PI
> > from certain paper files, while keeping the document intact.
> >
> >
> >
> > Thanks in advance for any advice you can offer.
> >
> >
> >
> > Patty
> >
> >
> >
> > *Patty Patria*
> >
> > *Chief Information Security Administrator |** Bentley University*
> >
> > *175 Forest Street, Waltham, MA 02452 **|**781.891.2364 *

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature