MDS2 (Medical Device) STCF: STCF Health data storage confidentiality: disclose encryption of stored data, its coverage and defaults, key management and database location

Discloses how the device stops unauthorised access from undermining the confidentiality and integrity of PII and other protected personal information held on it or on its removable media: whether data at rest can be encrypted, with the algorithms (encryption before network transmission or media export sits under TXCF-2) (STCF-1); whether all data is encrypted or otherwise protected, or only some types such as patient records (1.1); whether encryption is on by default (1.2); whether customers get instructions for configuring it (1.3); whether encryption keys can be changed or configured (STCF-2); whether data is stored in a database on the device (STCF-3); and whether data is kept in a database outside the device (STCF-4).