Quote:
|
I've been told that if you are holding customer data it needs to be on a seperate server to the website. Is this true?
|
Yes. that way the data access HAS to via a trusted and controlled route, so it removes or drastically reduces the possibility of maliciously installed daemons on the web server being able to access the database server directly.
The Data Protection Act is not about HOW the data is secured, it's more about what you can store, who has access to it and the rights of the people referenced being able to see and correct it if necessary.
__________________
Chris. ->> Links are advertising NOT optimising!! <<-
A foolish consistency is the hobgoblin of little minds
Thought for today:- I SEO the only industry where all the cowboys are Indians?
|