Passwords must always be encrypted. When stored outside of the authentication mechanism, passwords must be in a secured environment that is separate from the data and protected in the same manner as the data. For example passwords stored on mobile devices or portable storage devices must be protected as described under section F. Data storage on mobile devices or portable storage media.
Appears in 3 contracts
Sources: Information Sharing Agreement, Data Sharing Agreement, Information Sharing Agreement