Encryption

The process of scrambling data so that only people or systems holding the correct key can read it, protecting information if it is stolen or intercepted.

Encryption protects data in two main states. Data at rest is information stored on laptops, servers, phones, USB drives or backups. Data in transit is information moving across networks, such as a website using HTTPS or a secure VPN connection. Tools like BitLocker on Windows and FileVault on Mac provide full-disk encryption for computers.

If an unencrypted laptop is stolen from a vehicle, everything on it may be exposed, and that can trigger breach notification duties under Alberta's privacy laws if personal information is involved. With strong encryption and a properly protected key, the data is far less likely to be usable by the thief, which can significantly change the risk assessment. Encryption is also expected by many clients, regulators and insurers.

Practical tip: turn on full-disk encryption for every company laptop and mobile device, and store the recovery keys securely in a central location your IT provider manages. Without the recovery key, you could lock yourself out of your own data.