Question

While the law does not specify that organizations must use encryption, it does minimize risk. Does your organization encrypt data at rest and in motion?

If one of your employees had a laptop stolen with 1,000 patient identifiers on it and it wasn't encrypted, would that be considered a breach under the law? Are your company laptops (if you have them) encrypted? Are there restrictions on their use? Are personal laptops allowed to be used for "business" purposes?

Answer 1

Encryption is conversion of the data in form of code and secured, it can be accessible only to the concerned person who has the authority.An organization always for its security purposes should use this encryption method to protect the confidential matter in all period.

It is considered to be a breach under the law of Information Commissioner's Office (IOL).The organization will be sued rather than the employee because data protection is the major responsibility of them to secure it when giving a laptop to their employee.The organization has to pay a big penalty to the government under law for security breaches.

The employee will be subjected for penalties or fines as per the company's protocol,rules and regulations.

To prevent this most of the company's protect their data in encrypted form.They have restrictions on who should can access data during needs with secured password system.

Usually personal laptops are not recommended to use for business purposes to prevent any problems of data hacking through cybercrimes.