Data Encryption

Encrypt personal data at rest to comply with PDPA 2024. If your database is breached but PII fields are encrypted, you have a strong defense against negligence charges.

The Rule

ENCRYPT all Personally Identifiable Information (PII) at rest. Use AES-256-GCM with proper key management.

What Must Be Encrypted

Under PDPA 2024, these fields are data peribadi (personal data) and should be encrypted at rest: