Data Privacy
Data privacy covers the rules and practices governing how personal information is collected, used, shared and retained, and the rights individuals hold over that processing.
What is Data Privacy?
Definition
Data Privacy covers the rules and practices governing how personal information may be collected, used, shared and retained — and what rights the person it describes holds over that processing. It is a narrower and more legal question than data security: security asks whether the data is protected from unauthorised access, privacy asks whether the processing was permitted at all, and a system can pass one test while failing the other. In practice the operative rules are the GDPR in the European Union and equivalents such as the CCPA elsewhere, and they attach obligations to purpose, lawful basis and retention period rather than to any particular technology.
Role in cybersecurity
Data Privacy plays an important role in building organizational resilience against cyber threats. Implementing appropriate mechanisms in this area is required by regulations such as NIS2, DORA and ISO 27001.