This whitepaper is for historical reference only. Some content might be outdated and some links might not be available.
Protecting your Data on AWS
Article 32 of the GDPR requires that organizations must “…implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including …the pseudonymisation and encryption of personal data[...]”. In addition, organizations must safeguard against the unauthorized disclosure of or access to personal data.”
Encryption reduces the risks associated with the storage of personal data because data is unreadable without the correct key. A thorough encryption strategy can help mitigate the impact of various security events, including some security breaches.