OpenLegislation

Division 4.3 Encryption of data

United Kingdom

Original text. Later amendments are not shown.

The system shall provide for the following encryption of data:

  1. (a)

    personal data in electronic format shall be encrypted when stored or transferred to the competent authorities of the Member States in accordance with Regulation (EU) 2019/788, the keys being managed and backed up separately;

  2. (b)

    adequate standard algorithms and adequate keys shall be used in line with international standards (such as the ETSI standard). Key management shall be in place;

  3. (c)

    all keys and passwords shall be protected from unauthorised access.