Data scheme for dynamic encryption

A method, comprising:

• accessing, by a processor, a data model comprising a plurality of field names and, for each field name from among the plurality of field names, a target encryption state that indicates whether data identified by the field name is to be encrypted;
• receiving, by the processor, an encryption trigger;
• responsive to the encryption trigger, for each encryption event from among one or more encryption events, executing, by the processor, an encryption process comprising:
• identifying a target encryption state for the data based on the data model;
• and
• executing an encryption process on the data based on the target encryption state, the encryption process causing the data to be in the target encryption state.

A non-transitory computer readable medium storing instructions that, when executed by a processor, program the processor to:

• access a data model comprising at least a first database table and a second database table, wherein the first database table identifies a table having a plurality of columns that are subject to dynamic encryption, and the second database table stores, for each column from among the plurality of columns, a corresponding target encryption state for the data stored in that column,
• receive an encryption trigger;
• responsive to the encryption trigger, identify the table, one or more columns in the table, and the corresponding target encryption state of the one or more columns;
• and
• execute an encryption process that causing the data in each of the one or more columns to be in the target encryption state based on the data model.