As a web development agency we're currently taking on a site rebuild for a recruitment agency. The current site allows applicants to register as temporary workers for the agency ( our client ) who will then be assigned short-term contracts as and when required.
The application form on the current site for these workers captures and enormous amount of really sensitive data including bank details, contact details, education and even detailed medical history of the applicant. Amazingly it does this on a regular HTTP connection without SSL, and the data is stored in a mysql DB also used by the site. IMHO it's negligent at best.
Our client wants the same behaviour on the new site we're developing, but obviously we have strong concerns about the legality and the security concerns of implementing the current business logic.
Can anyone give any guidance about what can legally be stored, how best to store the information and maybe any alternative scenarios that we can put to the client? To clarify we're subject to UK (EU) data protection laws for this site.
Obviously the first step we're taking is to serve the new site via HTTPS, but other than that the best we can come up with so far is to just capture the non-sensitive information, and require the recruitment agency to make separate enquiries of the applicants to obtain the nasty stuff like bank account numbers and medical history.
any help much appreciated......