03-10-2009 11:37 AM
I don't actually have a Blackberry but I need to support users who do. We are a medical institution and deal with protected health information for many patients. My users have figured out how to connect their Blackberry's to our Exchange server. They all swear that they delete email with PHI but I'm not convinced that's sufficient.
On a Windows computer deleting a file isn't sufficient because of the way Windows handles file deletion, how does a Blackberry handle it? For example, if one of my users were to lose or dispose of their Blackberry could someone else find it and retrieve deleted emails?
Thanks in advance,
03-10-2009 11:59 AM
Yes and No.
One, your users should absolutely be forced to use a password. Are they on BES? If they are BES, you can require it. If they are not, you can't, but you can encourage it, just there is no way to force it. The password function on the BB is impenetrable and will wipe the device if ever found and the PW is incorrectly entered a certain number of times.
On your question... once deleted, it is deleted. There is no 'trash can' on the BlackBerry. An expert BlackBerry forensics technician could *possibly* retrieve data, and that is highly expensive to do.
Is that sufficient for your peace of mind?
PIN: C0001B7B4 Display/Scan Bar Code
PIN: C0005A9AA Display/Scan Bar Code
03-10-2009 12:01 PM