It specifies that encryption and decryption operations must be carried out locally , not by remote service .
Both keys and data must remain in the power of the data owner if any privacy is to be achieved .
It specifies that encryption and decryption operations must be carried out locally , not by remote service , because both keys and data must remain in the power of the data owner if any privacy is to be achieved .