A method for wireless communication by a base station, comprising: receiving an indication of downlink data for or uplink data from a user equipment, UE, that is in a state with no dedicated resources allocated to the UE in a network; determining whether or not to transfer context of the UE to another base station based on one or more factors regarding the data or the network; and processing the data in accordance with the determination, wherein processing the data in accordance with the determination comprises: if the determination is to transfer context, the method comprising: performing a UE context transfer to the other base station via a handover procedure; receiving an acknowledgement for the UE context transfer; deriving one or more keys for the other base station; transferring the one or more derived key to the other base station for use in deriving one or more new keys; and forwarding downlink data to the other base station without encryption and integrity protection; if the determination is not to transfer context, transferring downlink data without a UE context transfer to the other base station by: encrypting and/or performing integrity protection of downlink data with stored encryption and integrity protection keys for the UE; and providing the encrypted and/or integrity protected downlink data to the other base station. receiving an indication of downlink data for or uplink data from a user equipment, UE, that is in a state with no dedicated resources allocated to the UE in a network; determining whether or not to transfer context of the UE to another base station based on one or more factors regarding the data or the network; and processing the data in accordance with the determination, wherein processing the data in accordance with the determination comprises: if the determination is to transfer context, the method comprising: performing a UE context transfer to the other base station via a handover procedure; receiving an acknowledgement for the UE context transfer; deriving one or more keys for the other base station; transferring the one or more derived key to the other base station for use in deriving one or more new keys; and forwarding downlink data to the other base station without encryption and integrity protection; if the determination is not to transfer context, transferring downlink data without a UE context transfer to the other base station by: encrypting and/or performing integrity protection of downlink data with stored encryption and integrity protection keys for the UE; and providing the encrypted and/or integrity protected downlink data to the other base station. if the determination is to transfer context, the method comprising: performing a UE context transfer to the other base station via a handover procedure; receiving an acknowledgement for the UE context transfer; deriving one or more keys for the other base station; transferring the one or more derived key to the other base station for use in deriving one or more new keys; and forwarding downlink data to the other base station without encryption and integrity protection; performing a UE context transfer to the other base station via a handover procedure; receiving an acknowledgement for the UE context transfer; deriving one or more keys for the other base station; transferring the one or more derived key to the other base station for use in deriving one or more new keys; and forwarding downlink data to the other base station without encryption and integrity protection; if the determination is not to transfer context, transferring downlink data without a UE context transfer to the other base station by: encrypting and/or performing integrity protection of downlink data with stored encryption and integrity protection keys for the UE; and providing the encrypted and/or integrity protected downlink data to the other base station. encrypting and/or performing integrity protection of downlink data with stored encryption and integrity protection keys for the UE; and providing the encrypted and/or integrity protected downlink data to the other base station.