A method at a user equipment, UE, comprising: receiving first ciphering key parameters from a network node in a network; receiving a System Information Block, SIB, periodically broadcast from a base station within at least one cell for the base station, the SIB comprising ciphered and encoded first positioning assistance data for the at least one cell for the base station, and an indication of ciphering; deciphering the encoded first positioning assistance data based on the first ciphering key parameters and the indication of ciphering; decoding the deciphered and encoded first positioning assistance data; and obtaining location information for the UE based, at least in part, on the deciphered and decoded first positioning assistance data; wherein the network node comprises a Mobility Management Entity, MME, or an Access and Mobility Management Function, AMF, and wherein receiving the first ciphering key parameters comprises receiving the first ciphering key parameters using a Mobility Management, MM, procedure, the method further comprising: sending a first message for the MM procedure to the network node, the first message requesting the first ciphering key parameters; and receiving a second message for the MM procedure from the network node, the second message comprising the first ciphering key parameters, the method further comprising: receiving second ciphering key parameters, the second ciphering key parameters comprising at least one of a time of applicability and an indication of a geographic area of applicability; and sending the first message requesting the first ciphering key parameters in response to one of an expiration of the time of applicability, movement of the UE outside the geographic area of applicability, and receipt of ciphered positioning assistance data for which the UE lacks corresponding ciphering key information. receiving first ciphering key parameters from a network node in a network; receiving a System Information Block, SIB, periodically broadcast from a base station within at least one cell for the base station, the SIB comprising ciphered and encoded first positioning assistance data for the at least one cell for the base station, and an indication of ciphering; deciphering the encoded first positioning assistance data based on the first ciphering key parameters and the indication of ciphering; decoding the deciphered and encoded first positioning assistance data; and obtaining location information for the UE based, at least in part, on the deciphered and decoded first positioning assistance data; wherein the network node comprises a Mobility Management Entity, MME, or an Access and Mobility Management Function, AMF, and wherein receiving the first ciphering key parameters comprises receiving the first ciphering key parameters using a Mobility Management, MM, procedure, sending a first message for the MM procedure to the network node, the first message requesting the first ciphering key parameters; and receiving a second message for the MM procedure from the network node, the second message comprising the first ciphering key parameters, receiving second ciphering key parameters, the second ciphering key parameters comprising at least one of a time of applicability and an indication of a geographic area of applicability; and sending the first message requesting the first ciphering key parameters in response to one of an expiration of the time of applicability, movement of the UE outside the geographic area of applicability, and receipt of ciphered positioning assistance data for which the UE lacks corresponding ciphering key information.