Data encryption is mandated by official regulations for various types of data. In the US, data that identifies patient information is required to be compliant with the rules set forth by HIPAA that dictate how such records should be stored. Data in HDFS can be encrypted whilst at rest (on disk) and/or while in transit. The keys that are used to decrypt the data are generally managed by Key Management Systems (KMSs).