Back to DPDPA Glossary Index
Section 8(5); Rule 6Security & Safeguards
Encryption at Rest
Encryption at rest makes stored information unreadable without appropriate cryptographic keys.
Meaning and legal context
It reduces some exposure but does not replace access control or key management. DPDP does not mandate AES-256 and hardware security modules for every organisation.
Practical application
Separate key and storage permissions and test rotation and restoration.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.