What is the best method for emailing a sensitive document? (encryption)

[jnelsoninjax]

I need to email an HR department a letter from my bank that will contain account and routing numbers. What would the best method be to email this with some form of encryption? I would be using Mozilla Thunderbird as my email client.

[spy beef]

https://support.google.com/mail/answer/7674059?co=GENIE.Platform%3DDesktop&hl=en#zippy=%2Cim-using-another-email-account

[+BudMan MVC]

Doesn't your work (HR dept) have a way of sending them encrypted email?

 

Is your work using just public email services?  For example - at our work, via exchange.  We can encrypt email to any specific person right in the system.  And even if not - the email is all internal when sending to other users in the company.  The email never leaves the corp system.  You log into the corp system (all traffic encrypted to and from your machine to this system)..

 

If none of that is true - I would ask your HR person how to send them encrypted emails.  I have to believe they get sensitive info all the time sent to them.  Or ask your IT dept about it..  They should support some secure way of getting info to the people that need to exchange such info.  Salary info, Performance info, Health info, etc. etc. What company would allow such info to just be sent over public email without any form of encryption?

[jnelsoninjax]

  On 19/02/2021 at 13:05, BudMan said:

Doesn't your work (HR dept) have a way of sending them encrypted email?

 

Is your work using just public email services?  For example - at our work, via exchange.  We can encrypt email to any specific person right in the system.  And even if not - the email is all internal when sending to other users in the company.  The email never leaves the corp system.  You log into the corp system (all traffic encrypted to and from your machine to this system)..

 

If none of that is true - I would ask your HR person how to send them encrypted emails.  I have to believe they get sensitive info all the time sent to them.  Or ask your IT dept about it..  They should support some secure way of getting info to the people that need to exchange such info.  Salary info, Performance info, Health info, etc. etc. What company would allow such info to just be sent over public email without any form of encryption?

Expand  

What they suggested I do is physically mail the paper to them or bring it to them in person, since they are at a central location (downtown) vs where I am which is 15 miles or so away, and I do not have a vehicle. I was hoping to find a method to email said document to them, that way they would have it sooner.

[Mindovermaster Global Moderator]

  On 19/02/2021 at 01:52, jnelsoninjax said:

I need to email an HR department a letter from my bank that will contain account and routing numbers. What would the best method be to email this with some form of encryption? I would be using Mozilla Thunderbird as my email client.

Expand  

Is it a PDF file, or...

[+BudMan MVC]

  On 19/02/2021 at 14:09, jnelsoninjax said:

What they suggested I do is physically mail the paper

Expand  

Wow?  They didn't suggest you fax it too them

 

Off the top.. Simple way would be to just zip up the doc/image with a password on it.  Then call them and give them the password.

[jnelsoninjax]

  On 19/02/2021 at 14:29, Mindovermaster said:

Is it a PDF file, or...

Expand  

It currently is not even digitized, but when/if I do it will be pdf

[+Biscuits Brown MVC]

Have you considered just taking an Uber or Lyft to the HR building?

[jnelsoninjax]

  On 19/02/2021 at 15:18, Biscuits Brown said:

Have you considered just taking an Uber or Lyft to the HR building?

Expand  

$20 each way, so no I'd rather not if I can avoid doing so

[+BudMan MVC]

Charge it to the company

 

No offense meant but what sort of rinky-dink outfit do you work for that has no company secure email protocol or service?  There are many ways to skin that cat.. Many free options.. Something as simple s/mine or pgp/gnpg encryption/signatures of the emails.

 

In this day an age, even the smallest of companies need a way to securely exchange emails.  Especially with all the different privacy regulations related to personal info of any type, etc.  While regional and country regulations differ - the concerns are at a global level.. In the US there are HPIAA requirements for example - that would prevent the in clear emailing of some info.. So any company should have to have methods in place for transfer of this sort of info.  The same secure procedure could be used for other sensitive information like performance, salary, bank info for direct deposit info..

 

Maybe its just a lack of communication in the company not making sure all their employee's know how to use the companies secure email procedures?  Maybe this HR person is new - and doesn't know that the company has a secure email method

 

 

[Mindovermaster Global Moderator]

  On 19/02/2021 at 16:16, BudMan said:

No offense meant but what sort of rinky-dink outfit do you work for that has no company secure email protocol or service?  There are many ways to skin that cat.. Many free options.. Something as simple s/mine or pgp/gnpg encryption/signatures of the emails.

Expand  

Well, he used to work for Amazon, that tell you anything?

[+BudMan MVC]

Amazon for sure has secure email hehehe

[+primortal Subscriber²]

Send it via One Drive, https://support.microsoft.com/en-us/office/share-onedrive-files-and-folders-9fcc2f7d-de0c-4cec-93b0-a82024800c07?ui=en-us&rs=en-us&ad=us ?

 

Password protect and set the link to expire.

[jnelsoninjax]

  On 19/02/2021 at 16:16, BudMan said:

Charge it to the company

 

No offense meant but what sort of rinky-dink outfit do you work for that has no company secure email protocol or service?  There are many ways to skin that cat.. Many free options.. Something as simple s/mine or pgp/gnpg encryption/signatures of the emails.

 

In this day an age, even the smallest of companies need a way to securely exchange emails.  Especially with all the different privacy regulations related to personal info of any type, etc.  While regional and country regulations differ - the concerns are at a global level.. In the US there are HPIAA requirements for example - that would prevent the in clear emailing of some info.. So any company should have to have methods in place for transfer of this sort of info.  The same secure procedure could be used for other sensitive information like performance, salary, bank info for direct deposit info..

 

Maybe its just a lack of communication in the company not making sure all their employee's know how to use the companies secure email procedures?  Maybe this HR person is new - and doesn't know that the company has a secure email method

 

 

Expand  

The company is question is the Jacksonville Sheriff's Office, but I am just being hired on a civilian so I do not have access to email from them.  Also it seems really dumb to me to have to give them this information as I already provided it to them, just without the letter, canceled check, or bank statement, but they insist that they have to have one of the 3 items listed there...