# Commission Implementing Regulation (EU) 2019/1799 of 22 October 2019 laying down technical specifications for individual online collection systems pursuant to Regulation (EU) 2019/788 of the European Parliament and of the Council on the European citizens’ initiative, Division 4.3: Encryption of data

Extent: E+W+S+N.I.

The system shall provide for the following encryption of data:
(a) personal data in electronic format shall be encrypted when stored or transferred to the competent authorities of the Member States in accordance with Regulation (EU) 2019/788, the keys being managed and backed up separately;
(b) adequate standard algorithms and adequate keys shall be used in line with international standards (such as the ETSI standard). Key management shall be in place;
(c) all keys and passwords shall be protected from unauthorised access.

---
Source: https://www.legislation.gov.uk/eur/2019/1799/annex/division/4/division/4.3 (the official version)
Page: https://openlegislation.uk/eu-regulation-2019-1799/annex/division-4/division-4.3
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.