Encryption
Encryption is the process of converting data into a coded form that can only be read with the correct key, used to protect information stored on devices or sent over networks. It is a technical security term rather than a legal one, but it is an important way for a business to meet its legal duty to protect information.
How BC law treats it
BC's Personal Information Protection Act, SBC 2003, c 63, s. 34 requires organizations to make reasonable security arrangements to protect personal information. The Act does not mandate encryption specifically, but encryption is often expected for sensitive data and portable devices.
What it means for your business
Encrypting laptops, phones and backups reduces the impact of lost or stolen devices.
Risks and common mistakes
Storing sensitive client or employee data unencrypted on portable devices is a common cause of privacy breaches.
For the full explanation, see our entry on Data protection.
General information about British Columbia and Canadian law, current to October 2026. It is not legal advice.
