This chapter takes the rights to privacy, data protection, communications freedom and science as a normative framework. It then applies this to the governance landscape with regard to encryption. It concludes that governance measures should be aimed at minimising the risks of unlawful access. This in practice means, given the pivotal role of encryption in information security, that governments cannot take measures which restrict the application of encryption technologies. Instead, governments should invest in the development and adoption of encryption technologies to minimise the risk of unlawful access.