ICO releases guidance on encryption

The U.K. Information Commissioner’s Office has published new guidance on encryption. The guidance outlines current forms of encryption in use and scenarios when encryption can help protect an entity’s sensitive data. The resource covers encryption in the context of the EU General Data Protection Regulation’s integrity and confidentiality principle, as well as under Article 32 on security processing. “This guidance will help you to understand the importance of encryption as an appropriate technical measure to protect the personal data you hold,” the ICO blog post states. “Whether you are a controller or a processor, encryption is a technique that you can use to protect personal data.”
Full Story