Re: [AMaViS-user] Using amavis-new for compliance?

On Thu, May 03, 2007 at 11:06:07AM +0200, Ralf Hildebrandt wrote:
> * Jeremy Laidman <jlaidman@rebel-it.com.au>:
> > Hi
> >
> > Has anyone shoehorned amavis-new to do compliance policy such as required for
> > HIPAA? By this I mean detecting keywords within a message that suggest
> > leakage of personal information (medical records, social security numbers and
> > the like).
>
> That's a beautiful idea. We'd need that for the Charite as well.

Can't that be achieved with restriction classes (check only outgoing mail,
i.e. recipient != your/allowed-leakage domains) and body checks?

Ideally this should be managed such, that multirecipient mail, i.e. one
recipient for your or for allowed-leakage domains and one recipient
for foreign domains are handled corretcly.

What should the action be? A disclaimer, reject? How about patients which
shall be informed per e-mail (to a freemail-account)?



--
Robert Felber (PGP: 896CF30B)
Munich, Germany

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/