When it comes to data, privacy and innovation often appear to pull in opposite directions, as seen in the differing policy approaches taken in the US and EU [1]. Fully homomorphic encryption offers to resolve this conflict by making third-party data analysis possible without revealing user data. Policymakers need to be ready for this paradigm shift. This article describes this new technology and its potential policy implications, particularly in the context of recent EU and US data protection policy.