Article 32 of the GDPR requires appropriate security for personal data, and names encryption as an example measure. Certificates from PKI-as-a-Service enable encryption of personal data in transit between systems.
