diff --git a/docs/release-notes.d/encrypted-scratch-partition.md b/docs/release-notes.d/encrypted-scratch-partition.md
new file mode 100644
index 00000000..ea516059
--- /dev/null
+++ b/docs/release-notes.d/encrypted-scratch-partition.md
@@ -0,0 +1,3 @@
+- When using swap with scratch, the image is now decrypted when copying from
+  the scratch partition to the primary slot. Therefore, the sratch partition
+  doesn't contain plaintext firmware data anymore.