Download eBook (PDF) - Red Gate Software

1 – Understanding Sensitive Datatruncation is to be utilized for storage of the primary account number. Violationof the standard results in significant fines and the restriction of credit cardprocessing.As a DBA, an understanding of these requirements is critical to the complianceefforts of your organization. In many cases it is only the DBA who has thelevel of knowledge that is required to recognize what is involved in meetingthese specifications.Types of Sensitive DataThe following sections provide some specific examples of data that is generallyconsidered sensitive by laws, regulations or industry standards.Government Assigned IdentificationThroughout the world, individuals and businesses are provided with variousidentification numbers, by their respective governments. This data is importantto governments for validation of citizenship, work status, taxation, claiming ofbenefits, general identification and licensing. The following are a few examplesof identification numbers that are assigned by governments around the world:• Driver's License Number• Passport Data• Social Security Number (USA)• Employer Identification Number (USA)• Individual Taxpayer Identification Number (USA)• Preparer Taxpayer Identification Number (USA)• Permanent Resident Alien Number (USA)• Value Added Tax Identification Number (EU)• Unique Tax Payer Reference (UK)• National Insurance Number (UK)• Company Tax Reference (UK)• General Index Reference Number (India)• Permanent Account Number (India)• Tax File Number (Australia)All of these pieces of data are to be considered sensitive. When a givenidentification number is used widely, beyond its original intended purpose, thepotential damage from unauthorized disclosure increases.24