What is the primary difference between data privacy and data security?

What is the primary difference between data privacy and data security?

• A. Privacy concerns protecting data from unauthorized access and disclosure.
• B. Privacy concerns how data is collected, used, and shared.
• C. Privacy concerns about data retention.
• D. Privacy concerns about encryption strength.

Answer: (B)

Data privacy focuses on how data is collected, used, and shared—the governance and consent aspects of handling information. It asks questions like what data is gathered, for what purpose, who can access it, how long it’s kept, and how individuals’ rights are respected. Data security, by contrast, is about protecting data from threats—preventing unauthorized access or disclosure through technical safeguards like encryption and access controls. The primary difference is that privacy concerns the policies and rights around data collection and use, while security concerns the protective measures that keep data safe. The correct option captures privacy as about the collection, use, and sharing of data. The other choices describe security measures (protection from access or disclosure, encryption strength) or a privacy-related area (retention) but not the central governance focus.

Data privacy focuses on how data is collected, used, and shared—the governance and consent aspects of handling information. It asks questions like what data is gathered, for what purpose, who can access it, how long it’s kept, and how individuals’ rights are respected. Data security, by contrast, is about protecting data from threats—preventing unauthorized access or disclosure through technical safeguards like encryption and access controls. The primary difference is that privacy concerns the policies and rights around data collection and use, while security concerns the protective measures that keep data safe. The correct option captures privacy as about the collection, use, and sharing of data. The other choices describe security measures (protection from access or disclosure, encryption strength) or a privacy-related area (retention) but not the central governance focus.