Is Encryption Still Enough to Keep Data Safe?

Sep 3, 2025

This week, we look at why encryption alone isn’t enough—and explore how PETs, policy shifts, and inspection tools are reshaping what secure data protection really means.

One New Guidance

The ICO has issued new guidance on encryption. It clarifies how organisations should implement encryption to meet UK GDPR requirements and includes practical advice on preventing data breaches across common scenarios—like cloud storage, device use, and data transfers.

One YouTube Video

In this wide-ranging interview, security expert Bruce Schneier traces the history of encryption on the internet, explains why we’re still fighting the same battles, and argues that security must be built in—not patched on.

One Whitepaper

This whitepaper explores the rising risks of encrypted traffic—from cloaked malware to masked data exfiltration—and outlines how SSL/TLS inspection can help organisations balance privacy rights with the need for visibility.

One Research Paper

This paper explores how PETs could help automate sensitivity reviews in archives, making it easier to protect personal information while supporting research access.

One Infographic

Source: desfontain.es

One Cartoon

Source: xkcd.com