The European General Data Protection Regulation (GDPR) regulates how companies must handle personal data that they process. One requirement is to safeguard personal data from potential abuse.
The GDPR highlights encryption as an appropriate technical measure to protect personal data. The new legislation states that encryption makes data unintelligible to any person who accesses the data in the case of a data breach. Luckily, the TutaNota email service has always encrypted each and every email message at all times, making messages impossible for read for anyone other than the sender and the addressee(s).
Details may be found in the TutaNota Blog at https://tutanota.com/blog/posts/gdpr-compliant-email.