Tell me more ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.
up vote 1 down vote favorite
1

We're developing a travel/tourist application for a tours company who want to be able to input traveler information into an online database.

Is there any security best practice for storing passport numbers in a database? Should it be encrypted?

share|improve this question
Would you say passport numbers are more or less sensitive than, say, credit card numbers or passwords? – Nick Chammas Nov 17 '11 at 16:31
also @NickChammas passport numbers and SSN? – jcolebrand♦ Nov 18 '11 at 17:29
Relevant legal info searchsecurity.techtarget.com/answer/… – Ben Brocka Nov 18 '11 at 18:01
@jcolebrand - Another valid comparison. Just leading the OP to see that passport numbers should be treated with the same security and gravity as these other pieces of information. – Nick Chammas Nov 18 '11 at 18:34

1 Answer

up vote 3 down vote

Passport numbers should definitely be encrypted in the database. You should investigate the legality of collecting and storing this information before proceeding.

share|improve this answer
1  
Very good point about the legal requirements. – mrdenny♦ Nov 20 '11 at 11:13

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.