Data encryption at rest refers to the process of encrypting data while it is stored on a disk, which could be on a server, a database, or any other storage medium. This ensures that the data is protected from unauthorized access when it is not actively being used or transmitted.