Every business holds some customer information: names, phone numbers, addresses, sometimes card or ID details. Protecting it is good practice, builds trust, and in some cases is the law.
1. Know what you have
Make a short list of where customer information lives: your business software, e-mail, spreadsheets, paper files, phones.
2. Keep less
Don't collect what you don't need, and don't keep it longer than you need. Card numbers belong with your payment processor, not in a spreadsheet or an e-mail.
3. Limit who can see it
- Everyone has their own login; no shared passwords
- People only see what their job needs
- Accounts are turned off the day someone leaves
4. Lock it down
- Two-step sign-in on e-mail and business software
- Encrypt laptops (BitLocker on Windows, FileVault on Mac) so a stolen laptop isn't a breach
- Install updates, and keep backups with an off-site copy
5. Dispose of it safely
Shred paper, and wipe or destroy drives before old computers and phones leave the business.
6. Have a plan if something leaks
Know who you'd call. Idaho's data breach law requires businesses to investigate and to notify affected Idaho residents when certain personal information (such as a name with a Social Security, driver's licence or financial account number) is exposed. Some industries, such as car dealers and tax preparers, have extra federal rules.
We help small businesses put these basics in place, in plain English and without a big project.
Need a hand?
More about our firewalls, vpns and network security help. Or tell us what's going on and we'll get back to you.
Send us a message or call (208) 745-2981, Monday to Friday, 9 to 5.