The security case
Publication 4557 recommends encrypting all sensitive files and emails. The Safeguards Rule, at 16 CFR 314.4(c)(3), requires customer information to be protected by encryption in transit over external networks and at rest. A portal makes that the default instead of a choice each client makes.

