Paging the internet security-isti

My company has announced that henceforth we won't receive paper
payslips. There will be electronic payslips, accessible by the
intranet.

If we want to save copies, we are forbidden to do so on company
machines. We have to save them to our home pooters.

On these slips will be name, DOB, NI number, payroll number, etc etc.
The usual.

It strikes me that moving payroll records security from behind the
corporate system (which is pretty secure) and placing it in the hands
of Vanilla Windoze operators is not a bright thing to do. Any
compromised PC will yield some nice ID theft material. Company says
the system is secure, and adds that secuirty of your own PC is your
own responsibility. I'm saying that the company's own system is likely
to be considerably more secure.

Thoughts, anyone?

 

Print it out and keep the piece of paper.

 

If you need to produce a payslip for whatever reason (mortgage, etc)
will they accept something like that?

 

<shrug> Why not? What else is a "payslip" other than some toner stuck to
a sheet of paper...

 

Dunno. I'm not sure if your company can do this?
Legally I suppose it depends on the definition of "written".

From HR Revenue and Customs:

"By law, every pay day you must give your employee a written record of pay
and deductions, including:

a.. 'gross pay' - before the deduction of tax or National Insurance
contributions (NICs) and any other deductions
b.. employee's Class 1 NICs deducted
c.. tax deducted"

Mike

 

Of course.

I've been emailed PDF payslips for years now. Sage et al have the ability
to produce a payslip on pre-printed stationary or with the form itself
printed by the app - and if you can send it to a printer, you can send it
to a PDF.

This is 2009.

Written as opposed to verbal.

 

You could have a good point there, Sun US did ePAYSLIP, but Sun UK could
not, for "legal reasons".

 

Did your payslip go through the post ?

 

It seems that employees do have a right to a written paper payslip, if they
insist.

Mike

 

You can view but not save. Quote:

"Please note that in order to help you protect your personal data
staff are NOT permitted to save their ePayslips to any company network
drive or local drive (this includes your work home drive, c-drive or
desktop)"

Doesn't say.

Not a bad idea.

 

No. Handed out on payday.

 

"We're trying to help you from yourself".

If you are viewing the payslip with your browser, where does the temporary
cache reside? For 99.999% of people, that's on their local disc. So to
strictly adhere to their requirements, you can't view the payslip using a
work computer.

 

Mine is simply a print out anyway, except it's done by the finance
department. No headed paper. I could knock up a similar version in any
word processing package and put in whatever values I liked.

 

So do many, many large businesses.

 

heh. I once met a guy who had started a company offering secure delivery
of credit cards. Because the credit card co's had so many issues with
normal post he managed to secure the business.

Apparently, for the first collection he made from a certain company in
Northampton, they just turned up in a bunch of cars and the credit cards
were all just chucked into the boot.

He obviously delivered them all ok because I got the impression that he
had made rather a lot of money out of the venture.

 

I wouldn't but it looks like you've not got a lot of choice. I even opted
out of the NHS spine for the simple reason that thre's no such thing as a
properly secure electronic database. If it's accessible to one, it can be
accessed by others and not necessarily authorised folk either.

Tell 'em to **** mop.


--
Beav

VN 750
Zed 1000
OMF# 19

 

Yes. I'd hazard a guess that it's got nowt whatsoever to do with
security at all.

If you don't save your payslips on your work computer, your nosey
colleagues and the sysadmins can't find it while digging around for
"interesting" stuff.

 

Nah. I'm sure a verbal payslip, although somewhat long-winded, would
be fine as long as it was written and not oral.

 

That's different as it's protected by his PIN number

 

^^^^^^^^^

Arghhhh