Posted by jnew on 2/14/12 10:58am
Msg #411696

Document Security

I have recently received updated security notices from Equifax and LSI. Equifax had an online presentation and LSI has had an email concerning document security. They seem to be going in the direction of more requirements. It seems curious that title companies take this matter seriously and a lot of signing companies just email documents out to the NSA or ask that documents be faxed back to the SC after closing. For SCs who are just doing quality checks on their NSAs, do the title companies know about their documents being faxed and emailed back and forth. It seems that it might be a big security violation that they might not be aware of.

Reply by desktopfull on 2/14/12 11:19am
Msg #411704

Since the SS is hired by the TC, I would think that any requests made by the SS (fax backs, etc.) were on behave of the TC requirements.

Reply by jnew on 2/14/12 11:28am
Msg #411706

If the faxback is to the TC, that would usually be the case. I know that some signing services ask for faxbacks to the SC and the requirement does not appear in the title company instructions, which leads me to believe that the SC is requiring it as a quality control for the NSA.

Reply by jba/fl on 2/14/12 11:32am
Msg #411708

I think that as well - SS requirements. When asked if they want faxbacks or package dropped, it is always suspended. To me, that is a clue. Of course, there are those who say otherwise, but I don't have many of those thankfully.

Reply by ReneeK_MI on 2/14/12 11:43am
Msg #411711

maybe they know, maybe not ...

Each entity is passing the liability onto the next, ensuring that their own protocols are secure. LSI's e-mail is particularly interesting, requiring that you "receive and handle" docs in a secure manner. The "receiving" part needs to be defined, if they're going to attempt to hold someone liable, IMO. This could put us at the nasty end of things if we "receive" un-encrypted docs that go sideways into the stratosphere.

It is a likely reference to receiving via mobile phone apps - something I do not/will not do. I understand the nature of 'passing the buck'.

It does seem to be an increasing amount of risk being taken by NSA's, from what I catch on the forums - copies on CD's thumb-drives (w/o permission), e-mailing docs to borrowers, etc.

If people had a better understanding of the EXTREME protocols and the vast sums of money, time & training spent on data security w/in lending & title offices, it might help drill it home. Having come out of that environment - the risks are very clear to me, and I'm not signing up to take on any I can avoid. As an interesting aside, the lenders didn't really go full-blown on the e-docs until around 2000 - maybe a decade AFTER plenty of commerce was being done over the internet. Security was the reason it took them so long (that, and change is hard!).

Reply by JanelWI on 2/14/12 2:07pm
Msg #411736

Re: maybe they know, maybe not ...

So another word, the email I just received from LSI stating their new privacy and information handling rules is just another unrealistic, very broad, non specific attempt for crap to roll down hill. That is a form of dodge ball I am never in the mood for:-)

Reply by snuzzz_CA on 2/14/12 9:53pm
Msg #411811

Re: privacy issue

Signed documents as well as notary journal left in a car overnight which was burgarlized. Signed documents and journal were stolen. Due to the persoanl information being stolen certain creditors had to be notified with replacement items issued for the borrower. The stolen items were left in the front seat of the car. I believe this might be an example of what prompted the email from LSI.

Reply by JanelWI on 2/15/12 10:03am
Msg #411845

Re: privacy issue

I get why LSI sent the email. I have never and would never leave my documents in my car overnight anywhere. Not even in my own garage. All documents on my travels stay with me until they are dropped. When I work it is not an opportunity to stop at the store or do errands. I work and then schedule personal errands on my days that I don't work. Once the docs are dropped however, I am not responsible after that point; drop box or no drop box. We don't have UPS Stores or Fed Ex stores or facilities where documents can be dropped at. I will not be responsible for documents once dropped in a drop box. I document where it was dropped and the time on the confirmation for my records and inform the company that drop boxes are our only option. I also try to drop as close to the drop time as feasibly possible so the docs are not sitting in a drop overnight either or sitting all day until pick-up. That is the best I can do.