In order to actually do something about this, I think I will start thinking
about implementing some of the recommendations found in this overview:

Device Encryption: The Cure for the (Surprisingly) Common Data Breach -
Kroll Ontrack

http://tinyurl.com/7dfdagz

My apologies if this has already been shown on the listserv.

***************************
John Phillips
Information Technology Decisions
www.infotechdecisions.net



-----Original Message-----
From: John Phillips [mailto:[log in to unmask]] 
Sent: Sunday, February 12, 2012 11:06 PM
To: 'Records Management Program'
Subject: RE: The Risks of Taking Your Electronic Devices Abroad

Very unsettling. But the consensus of much of the public is that airports
are already practically police states. You have no real rights at all. Just
try telling a TSA agent, flight attendant or other "authority" that you
disagree with what their telling you to do and that you will not do it.
"Sir, please step aside into our little room" is what you will hear. So,
when they ask for your laptop, you will turn it over, or you could literally
be looking down the barrel of a gun. Not pleasant, but real. TSA generally
does a good job, but has little time to debate much. And we will have no way
to protect the data once it is out of your hands, unless we planned ahead.

If the "authorities" ask Google or any cloud vendor for your information, do
you think they will ask you if you mind, or will they just hand it over? I
would say they will see the "authorities" as a much bigger and more
important "customer." This is probably a good case for encrypting what you
put there, and only downloading it and unencrypting it temporarily when you
arrive. Similar to the advice in the article.

We might had better take our own actions to protect our data and our
organization's data, and not wait on the lawyers. It is interesting that
this article focuses on the lawyers' responsibility to their clients. That
sentiment should probably also apply to us and our responsibility for
protecting our organizations' data. I have always wondered what I would do
if I was on travel at a client' s location, left the laptop in the hotel
room as I went to dinner and then came back and the laptop with the client's
data was gone. Talk about getting after dinner heartburn! Pass the Tums
please!

***************************
John Phillips
Information Technology Decisions
www.infotechdecisions.net



-----Original Message-----
From: Records Management Program [mailto:[log in to unmask]] On Behalf
Of RIMMAN
Sent: Sunday, February 12, 2012 6:41 PM
To: [log in to unmask]
Subject: Re: The Risks of Taking Your Electronic Devices Abroad

Simply put, wow...

A good read for anyone that travels and take client or what they may
consider confidential information with them. And no, information stored in
'the cloud' is not protected any more than that on your device/s.

As for the concept of seeking protection under your 5th Amendment rights,
I'm not sure how far that's going to get you under all circumstances.

Larry
[log in to unmask]

Sent from MY iPhone4

On Feb 12, 2012, at 2:09 PM, PeterK <[log in to unmask]> wrote:

> The Risks of Taking Your Electronic Devices Abroad The *Boston Globe* 
> just reported this precise scenario happening to a former MIT 
> researcher coming back from Mexico and noted that some attorneys fear 
> that something similar could happen to them, upon their return home 
> from a vacation or a business trip. The MIT researcher sued the 
> Department of Homeland Security over the "suspicionless" seizure of 
> his laptop.
> 
> Source:
> http://www.law.com/jsp/article.jsp?id=1202542075808&The_Risks_of_Takin
> g_Your_Electronic_Devices_Abroad

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance To unsubscribe from
this list, click the below link. If not already present, place UNSUBSCRIBE
RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]