The Security Mentor

Your bank account information, driver's license details, and social security number may be posted on the web if you live in Broward County, Florida.

It's not an external security breach, either. The county is doing it on purpose. They're following a public records disclosure law.

Here's where policy comes in. Most small organizations have an unwritten policy of "do what makes sense". If you grow to be big and/or hire dumb people, you have to write down a policy that gives people permission to do the right thing. Otherwise you wind up like Broward County, where your personnel are saying things like "recorders have no statutory authority to automatically remove Social Security, bank account and driver's license numbers".