Q: We always meant to automate our plan audit files, but somehow we didn’t get around to it. When the pandemic hit, we had to send the information via email, and it looks like we will have to do so again. What do we need to know to protect the information we send?
A: First, you are not alone. Before COVID-19, lots of companies were maintaining all of their plan audit records on paper, and thus faced a challenge when they had to send them off for review. And you’re right, data security is threatened when that transmission is not done properly. It’s a serious matter, because one of the duties of an Employee Retirement Income Security Act (ERISA) fiduciary is managing the plan appropriately and that includes keeping security in mind.
As you prepare to send any plan records to a third party, there are two primary things to keep in mind: which information, and how to send it.
Understand that “personal protected information” may comprise more data than you think, so do your best to learn exactly what’s included. In general, email is not a secure means of sending sensitive information, even if your company has strict controls. So the first thing to do is set and communicate guidance about what can and cannot be emailed. Then, contact anyone who may need sensitive information and find out if they have a secure portal you can use to transmit it. That way, the recipient will need to log in to view the information, reducing opportunities for data theft.
If your provider does not have a secure portal for this purpose, you may want to find one that does.
Read more about protecting your plan audit (and other) data in this article: https://tinyurl.com/Cassell-protected.
Ready to discuss your retirement plan with a 401(k) Advisor?
RP-756-1221 Tracking #1-05221516 (Exp. 12/22)
For plan sponsor use only, not for use with participants or the general public. This information is not intended as authoritative guidance or tax or legal advice. You should consult with your attorney or tax advisor for guidance on your specific situation.
Kmotion, Inc., 412 Beavercreek Road, Suite 611, Oregon City, OR 97045; www.kmotion.com
©2021 Kmotion, Inc. This newsletter is a publication of Kmotion, Inc., whose role is solely that of publisher. The articles and opinions in this publication are for general information only and are not intended to provide tax or legal advice or recommendations for any particular situation or type of retirement plan. Nothing in this publication should be construed as legal or tax guidance; nor as the sole authority on any regulation, law or ruling as it applies to a specific plan or situation. Plan sponsors should consult the plan’s legal counsel or tax advisor for advice regarding plan-specific issues.
