The IG states that reports may be encrypted before they are sent from the Backend Service app to where they are going. This statement is made in various locations such as the pages referenced in the ticket as well as through the definition of an action to use in the PlanDefinition. However, there is no mention as to how keys will be exchanged between disparate parties to perform the encryption and ensure that the data can be encrypted once it arrives at it's destination. If this specification expects to allow for automation of these types of actions then it needs to define how the keys will be shared between the systems. This could be as simple as piggy backing on the smart bulk data configuration and stating that there needs to be encryption keys defined in the keyset as well as signing keys , but it needs to be defined somehow.