Making requested changes [netlify-build] [DOC-688]

Author: forstisabella

src/privacy/hipaa-eligible-segment.md

@@ -40,10 +40,7 @@ Segment can encrypt PHI/PII before sending it to event stream, cloud mode destin
 Segment encrypts the data in fields [marked as yellow in the Privacy Portal](/docs/privacy/portal/#default-pii-matchers) with a public/private key pair. After Segment encrypts the data, it is converted into a `string`. Any downstream validation that looks for `integer` data types will fail for encrypted values.
 
 > info "Data encryption is currently in public beta"
-> This means that the data encryption features are in active development and some functionality may change before it becomes generally available. [Contact Segment](https://segment.com/help/contact/){:target="_blank"} with any feedback or questions.
->
-> During the public beta, data encryption supports event-stream, cloud-mode destinations. Engage destinations are not supported. Only data fields in `context`, `traits`, and `property` objects can be encrypted.  
-
+> Data encryption supports event-stream, cloud-mode destinations. Engage destinations are not supported. Only data fields in `context`, `traits`, and `property` objects can be encrypted.  =
 
 ### Configure data encryption for a new destination
 
@@ -54,7 +51,7 @@ To configure data encryption while setting up a new destination:
 4. On the Select data source page, select the source you want to connect to your destination and click **Next**.
 5. On the Setup page, give your destination a name, fill in any optional settings, and select the **Have Segment encrypt sensitive data** checkbox.
 6. Open the **Fields** dropdown, select one or more fields you'd like to encrypt and click the **Generate Encryption Keys** button. <br> *If you don't see all of the fields that you want to encrypt, [change the classification of your missing data fields](/docs/privacy/portal/#change-a-recommended-classification) in the Privacy Portal*.<br> 
-7. Copy the Private Key to a secure location - **once you finish setting up the destination, this key cannot be retrieved**. 
+7. Securely store your private key - **once you finish setting up the destination, this key cannot be retrieved**. 
 8. Click **Create destination**.
 
 > error "Private Key is not recoverable"
@@ -67,27 +64,27 @@ To configure data encryption for an existing destination:
 2. Select a destination, and click the **Data Encryption** tab.
 3. On the Data Encryption page, select the **Have Segment encrypt sensitive data** checkbox.
 4. Open the **Fields** dropdown, select one or more fields you'd like to encrypt and click the **Generate Encryption Keys** button. <br> *If you don't see all of the fields that you want to encrypt, [change the classification of your missing data fields](/docs/privacy/portal/#change-a-recommended-classification) in the Privacy Portal*.<br> 
-5. Copy the Private Key to a secure location - **once you finish configuring data encryption, this key cannot be retrieved**. 
+5. Securely store your private key - **once you finish configuring data encryption, this key cannot be retrieved**. 
 6. Click **Save**.
 
 > error "Private Key is not recoverable"
-> Segment does not save the private key created during the data encryption setup, and cannot retrieve the key after you add data encryption to your destination. Segment cannot decrypt data if this key is lost. You can generate a new key without decrypting your data using the instructions in the [Configure new key pairs](#configure-new-key-pairs) section.  
+> Segment does not save the private key created during the data encryption setup, and cannot retrieve the key after you add data encryption to your destination. Segment cannot decrypt data if this key is lost. You can generate a new key any time using the instructions in the [Configure new key pairs](#configure-new-key-pairs) section. All updates are forward looking 
 
 
 ### Configure new key pairs
 
-If you lose access to your initial private key, you can generate a new key pair in your destination's Data Encryption tab. Any data previously encrypted using the previous key pair will remain encrypted.
+If you lose access to your private key, you can generate a new key pair in your destination's Data Encryption tab. Any data previously encrypted using the previous key pair is unaffected.
 
 To generate a new key pair:
 1. Open the [My destinations page](https://app.segment.com/goto-my-workspace/destinations){:target="_blank”} in the Segment app.
 2. Select the destination you'd like to create new keys for and click **Settings**.
 3. Click **Regenerate Encryption Keys**.
-4. Copy the Private Key to a secure location - **once you close the dialog box, this key cannot be retrieved**. 
+4. Securely store your private key - **once you close the dialog box, this key cannot be retrieved**. 
 5. Click **Save Changes** to update the key pair. 
 
 ### Remove encryption
 
-Disabling the data encryption setting removes encryption on all data that comes into a destination after the setting was disabled. Disabling data encryption does not decrypt any data that was previously encrypted.
+Disabling the data encryption setting removes encryption on all data that comes into a destination after the setting was disabled.
 
 To remove encryption from incoming data:
 1. Open the [My destinations page](https://app.segment.com/goto-my-workspace/destinations){:target="_blank”} in the Segment app.