Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

We're developing a travel/tourist application for a tours company who want to be able to input traveler information into an online database.

Is there any security best practice for storing passport numbers in a database? Should it be encrypted?

share|improve this question
    
Would you say passport numbers are more or less sensitive than, say, credit card numbers or passwords? –  Nick Chammas Nov 17 '11 at 16:31
    
also @NickChammas passport numbers and SSN? –  jcolebrand Nov 18 '11 at 17:29
    
Relevant legal info searchsecurity.techtarget.com/answer/… –  Ben Brocka Nov 18 '11 at 18:01
    
@jcolebrand - Another valid comparison. Just leading the OP to see that passport numbers should be treated with the same security and gravity as these other pieces of information. –  Nick Chammas Nov 18 '11 at 18:34

1 Answer 1

Passport numbers should definitely be encrypted in the database. You should investigate the legality of collecting and storing this information before proceeding.

share|improve this answer
1  
Very good point about the legal requirements. –  mrdenny Nov 20 '11 at 11:13

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.