It's a nice solution, but it's important to know what the problem is. I'm unclear about why the data must be encrypted. The only point is to keep the enduser from using the data, so it would seem sufficient to just have the late clearance flag alone - let the client decide how it wants to handle data while it is in the uncleared state. Why is this insufficient? Hilarie