Database Security

[Earl C Phillips]

I am creating a new database for a non-profit school teaching kids with disabilities. Of necessity, there will be data included that is medically and administratively sensitive.

How do I protect this data so outsiders cannot hack into it and access and/or devulge this information about students and parents? Any help pointing me in the right direction will be greatly appreciated. I want security that will not be embarassing or revealing.

 

[ButtonMoon]

If any kind of role-based security is required then you cannot use Jet/ACE as the data store. Role-based security is pretty much essential and standard practice for any sensitive, non-trivial or regulatory data security. Use a client-server DBMS that has server-side, role-based security features. You could use any of the free-to-install versions of Oracle, SQL Server, PostgreSQL, etc.

If you haven't already then you'll want to check out what privacy laws and regulations apply to your data. Most European and North American jurisdictions have legal requirements concerning the storage of personal data and medical health related data.