A method for encryption of the content in a database, the method including the steps of detecting that a predetermined time period has elapsed, generating an unexpired encryption key, associating the unexpired encryption key with expiration information, scanning the database for an encrypted item, the encrypted item corresponding to a plaintext item, the encrypted item having been encrypted using an expired encryption key, and encrypting the plaintext item, using the unexpired encryption key, into a reencrypted item.