Not at all. in one sense, kind of looking at how the EU wrote their GDPR a few years ago, (and this being an insurance company looking at risk) it may be a matter of getting 1099 vendors to check a box or sign a privacy statement that says you have their PII and you're doing your best to protect it. Don't know if you can say "if there's a breach, you can't take action against us." I am sure all US ERP publishers have this on their radar. In Maryland, we can't print any SSN's on documents, like pay stubs. We have to mask them.
------------------------------
==================
Rhonda McNamara
Customer Success Manager
Stewart Technologies, Inc.
rsm@stewarttechnologies.com------------------------------