All,

I have an interesting dilemma. I have what I believe to be a pretty good idea for a health care site. My custom modules are pretty close to spot-on, and I have nearly everything ready for my soft launch. I have one problem. HIPAA requires there be absolutely no user-attributable data, and it would help me immensely to have the backing of the medical and insurance communities. My design is pretty secure, but I need to be able to encrypt all name fields and email in the database.

Does anyone have any suggestions on how to do this ether in code or with a third party module?

Any and all help is greatly appreciated!

Thanks,
B

Hi Sebastian

Thanks for your reply. I was thinking of that approach, and it really wouldn't be terribly difficult to pull off. My only concern there is the whole thing blows up if I ever decide to upgrade DNN. Not very scalable. It is too bad there is not a group of settings allowing the admins to encrypt additional fields (hint hint B-) )

I have looked into entire database or column level encryption, and since I am on SQL 2005, it would be an extremely pricey proposition.

I am also thinking that OpenId or similar might be the way to go. If my system ever gets corrupted, the user info isn't even there. Not sure though.

Thanks,

Bruce