Do I Need SSL For GDPR?

The new General Data Protection Regulations (GDPR) will come into force on May 25th, 2018 and if you make it through all 261 pages of the document, you’ll find the ICO hasn’t committed to an actual directive regarding encrypting data sent from a website’s web-form.

‘Encryption’ is mentioned 4 times in the document;

1. …implement measures to mitigate those risks, such as encryption.” (P51. (83))
2. …appropriate safeguards, which may include encryption” (P121 (4.e))
3. …including inter alia as appropriate: (a) the pseudonymisation and encryption of personal data.” (P160 (1a))
4. …unintelligible to any person who is not authorised to access it, such as encryption” (P163 (3a))

There are other ways to mitigate the risk when transferring data, other ways to make the data unintelligible and other safeguards, all more complicated (and more expensive) than SSL encryption.

We think the bottom lines is; if your website is sending data through a web-form you need HTTPS to ensure it’s encrypted in transit.

Related posts:

GDPR-General Data Protection Regulations GDPR: Experts Explain Its Affect On Email And Consent The Digital Markets Rely On Trust EU Citizens Embrace Their Right To Privacy Under GDPR. The Plague of Plagiarism in Universities Google Fined £2.1 Billion By The EU For Manipulating Search Results Following GDPR California Implements Their Own Privacy Legislation A PPC Strategy Guide Without Using Remarketing Techniques