40hz, I am mostly just trying to get my business records functionally secure and all team members to see and work on documentation for the same clients so we all know what is going on. We are in the US, where the Hipaa laws wreak havoc with ordinary communication and electronic storage. I actually argue with the people who monitor my security. It is OK to send information by snail mail, but anyone can steal a letter, copy a letter, send it to someone else. A letter can get lost in the US postal service. Same for faxes. Who knows who else is in the office with the fax machine? So to me, the fact that someone can "break into" the data and steal it, it just more of the same. However, no one asks my opinion. 
Erica
-ericalynne
Hi Erica!
I both understand where you're coming from and fully agree with you.
Like you, I'm in the USA. My client base is primarily in the regulated financial (i.e. brokerage, mortgage, fund) and legal sectors. So security and privacy is both a moral and legal concern when it comes to data and communications.
I only mentioned that nothing can be considered secure any longer because of the depths the meddling on the part of the NSA has reached. This meddling goes far beyond data intercepts and decryption efforts. The NSA's agenda has completely undermined security - and put all of us at greater risk - in order to make their own work and mission creep easier.
At this point we know that encryption algorithms, random number generation, national standards institutes, secure transmission layer technologies and protocols - along with commercial operating systems, security products
and hardware have all been compromised in the name of "national security."
I actually asked a brokerage association (and later my local bar association) how to address their guidelines for security and privacy protection in light of what’s been going on. Their answer was:
we don't know. Both
refused to respond to my question as to whether it was
even possible for their members to
meaningfully assert compliance with existing state and federal laws regarding client privacy and data security since it is now obvious the entire underpinnings of their systems are
pwned - and have been for approximately the last 10 years.
I think you hit the nail when you said "functionally secure." Which I would interpret to mean: Effectively safe from everyone -
except the US government.
As it stands, you're absolutely right. That's about as secure as we can be. For now.
-ed