"Plan Sponsors should have documentation in place as to how their information can be accessed, who has and who should have access, and tools in place to protect that information.... [T]hey should have a process in place to continually monitor who has access to the data to ensure that only current employees have access to the information.... It is very important to secure all data that is sent/received from Third Party Administrators and plan participants. Secure portals or encrypted data are typical means of safely sending sensitive information."  MORE >>