US Firms should encrypt their VoIP service network

US firms should encrypt their VoIP service network in order to protect sensitive information, according to an expert.

A range of confidential data can be transferred during a VoIP call, including bank account details and private medical records.

American businesses which use VoIP must comply with a host of regulations including the Health Insurance Portability and Accountability Act (HIPPA) and Payment Card Industry (PCI) standards.

Michelle Klinger, a US digital security assessor, claimed she would have to ensure calls were encrypted during an assessment.

She told computerworld.com: "I would be inclined to validate that the calls are being encrypted."

Ms Klinger added that internal calls would not be subject to the regulations and would therefore not have to be encrypted.

Companies could hire consultants to ensure their current practices comply with VoIP legislation, according to Chris McClean, an analyst for research firm Forrester.