This past Tuesday, we held a webcast on the new Massachusetts Data Protection Law, a.k.a. 201 CMR 17. Here's a link to the replay [reg. required]. I ran out of time to answer all of the questions, but there were so many good ones so I decided it was worth writing a post to answer them.
Q: If you use a workgroup version of PGP Whole Disk Encryption can you still get reports on compliance or do you need the Universal Server to prove compliance?
A: Yes, PGP Whole Disk Encryption Workgroup Edition does provide basic reporting that you can use to demonstrate compliance.
Q: What is the impact of computer speed when the entire disk in encrypted?
A: We generally see negligible impact on performance once the initial encryption has taken place.
Q: How does encrypting the BES server affect data on the hand held devices?
A: PGP Support...