Encryption: From Spartans to Smartcrypt
From the Spartans with their Scytales, through the 15th and 18th Centuries with Alberti Ciphers and Jefferson wheels, to 20th century Enigma machines DES ,3DES, AES and so on, man has sought to hide information from the wrong people and to make it accessible to the good. Today encryption is endemic in most data transactions that occur on the internet. However not all data is protected within our environments, whether that be data at rest in our archives or even in motion for day to day use. The category of data takes many forms from software and mechanical designs to business transactions and HR records, all of which hold value to a company. Paramount in this list is Personal Data, but what is Personal Data?
‘Personal data‘ is defined as any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier, such as a name, identification number, location data, an online identifier (such as an email address) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
This is not solely related to just HR, but if you hold and process any personal data, including use for business transactions, then you are bound to guard/protect that data.
GDPR comes into force next year and its purpose is to ensure and enforce that we take due care of the personal data we possess and that the rights of those citizens are protected.
In many cases the identification and application of a suitable encryption policy as part of the “Data protection by design and by default” obligations under GDPR, can bring a company much closer to compliance with the regulation.
PKWARE’s Smartcrypt solutions bring a number of tools to aid in the Data Discovery, Policy Implementation and Management of Data Encryption, in order to help you meet the Data Protection requirements of personal data at rest and in-motion under GDPR.
It just goes to show that protecting data, from the Spartans to PKWARE Smartcrypt, is nothing new and should be incorporated by Design.