Re:Robinhood Stored Passwords in Plaintext
by buro9 on Thursday July 25, 2019 @07:44AM
(#20524528)
> Just noting a somewhat less than universal interest in compliance issues.
Is there a compliance document that requires this approach?
Or is it that the compliance states reasonable safety whilst handling PII and security credentials, and that it is down to the interpretation by each individual company as to what that means.
Re:Robinhood Stored Passwords in Plaintext
by mijoharas on Thursday July 25, 2019 @09:53AM
(#20525339)
GDPR covers fines for logging sensitive things like passwords. There is additional separate certification needed if you're handling any payment details (i.e. Card numbers) yourself
Is there a compliance document that requires this approach?
Or is it that the compliance states reasonable safety whilst handling PII and security credentials, and that it is down to the interpretation by each individual company as to what that means.