Rules for encrypting laptops, phones, backups, emails and file transfers, managing encryption keys and recovery codes, and controlling USB drives and other removable media – with a device encryption register.
IT & cyber security
Encryption and Removable Media Policy
About this document
If a laptop, phone or USB stick is lost or stolen, encryption is what stops the information on it from being read. The ICO regards encryption as an appropriate security measure under UK GDPR, and a lost device that was properly encrypted may not need to be reported as a personal data breach. This policy sets out what must be encrypted, how, and how removable media is controlled.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
IT & cyber security
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
