REGULATORY WATCH BRIEF Low 35 🧭 Regulatory Guidance published

Amazon Ring's 'Throw Away the Key Encryption' adds limited privacy but falls short of true end‑to‑end encryption

TAKE improves key handling but does not provide the full privacy protections of end‑to‑end encryption, leaving users vulnerable to law‑enforcement access.

ADTP Regulatory Watch · September 11, 2026

ImpactLow 35

Type🧭 Regulatory Guidance

Statuspublished enacted, check the effective date

JurisdictionUS

What happened

Amazon introduced the Throw Away the Key Encryption (TAKE) feature for Ring cameras, where encryption keys are held temporarily in the cloud and deleted after 24 hours. The system still allows Ring to decrypt footage for cloud‑based features, meaning the company retains access similar to encryption‑at‑rest. Ring states it will not keep backups of keys and will only provide encrypted video in response to valid legal process.

Why it matters for trust and compliance

Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
TAKE improves key handling but does not provide the full privacy protections of end‑to‑end encryption, leaving users vulnerable to law‑enforcement access.

Who is affected

technology controller processor platform Amazon Ring

Recommended actions

Check that privacy notices describe the practices this addresses.
Map the security requirements to existing controls and close gaps.