Pension Benefit Information takes information security very seriously. The data contained in our client’s files are very confidential in nature. At PBI, we recognize that our relationships with our current and prospective clients are based upon integrity and trust. This is why we take several precautionary actions in protecting and securing information while making sure that it is used appropriately.

Privacy Policy

Access to client information and technology is restricted to PBI employees only for the purposes in which the information was provided. PBI maintains the confidentiality of all client files and will never use files for purposes not authorized. Client information is guarded by Physical, Electronic, and Procedural safeguards to protect information supplied to us by clients.

Administrative Policy

Access to information and technology is on a need-to-know basis and is based on job function. User access capabilities are changed immediately upon change of job responsibilities, leave of absence, or employee termination. Background checks are completed for every new employee and include criminal check for the past seven years, driver’s license verification, and civil action checks.

Technical Systems

User Id’s for access to information are not shared by policy. Passwords are not documented by policy. The length of all passwords is at least seven characters, consisting of a combination of upper and lower case alphas with numbers.
Passwords have a maximum lifetime of 90 days and are not shared among users.

Data containing Social Security Numbers is strictly prohibited from being sent over the internet unless protected by PGP encryption. PBI’s Director of Operations and Security and the Death Audit Project Manager are the only PBI employees with access to the encryption key.

The security of our database is tested on a regular basis. Any suspected breach of security is immediately reported to the Director of Operations & Security. As a policy, if we suspect at any time that our security could be, or has been breached access to the client database is immediately suspended for all users.