National Encryption Policy

Encryption technologies enable Internet users to protect the confidentiality of their data and communications from unwanted observation and intrusion.  Electronic encryption is the process of scrambling or enciphering data so it can be read only by the person who has the key to unscramble it. Modern encryption scrambles data using a secret value or key known only by the recipient and the sender. For stored data, the secret value typically is known only by the data owner. This is essential for all aspects of digital transformation.  If do not have this, cannot begin the work to transform the government.

Encryption should be the norm for all Internet traffic. New Policy needs to ensure that users’ data, whether stored or communicated, are encrypted by default. End-to-end encryption solutions should be made available to all wherever possible.  Need to encourage operators to deploy encryption and firewall policy.