Encryption, or the encoding of messages in such a way that only intended recipients can understand them, is one of the main tools to guarantee the security of our information. It is recognised as necessary for the digital economy and for the protection of fundamental rights, such as privacy and free speech.

While law enforcement requires the means to fight crime on the internet, any new measure would have to first pass the test for necessity and proportionality, based on substantiated evidence. While encryption makes bulk data collection and mass surveillance difficult, it is not a limiting factor in more targeted and specific measures. Restrictions on encryption pose significant risks to the economy and society in general.



EDPS decision on the investigation into the European Commission's use of Microsoft 365

On 8 March 2024, the EDPS adopted a decision following its investigation into the European Commission's use of Microsoft 365. In the decision, the EDPS focused on compliance with provisions of Regulation (EU) 2018/1725 related to purpose limitation and international transfers and unauthorised disclosures of personal data (see also press release).

Available languages: English

Introduction to the hash function as a personal data pseudonymisation technique

Joint paper of the Spanish data protection authority, Agencia española de protección de datos (AEPD), and the European Data Protection Supervisor (EDPS) on hash techniques in data processing activities as a safeguard for personal data.

Available languages: English, Spanish