What is the difference between data privacy and information security within a security context?

What is the difference between data privacy and information security within a security context?

• A. They are the same
• B. Data privacy relates to how personal data is collected, stored, and used; information security focuses on protecting data from unauthorized access or disclosure.
• C. Data privacy is about physical security; information security is about HR
• D. Information security is about marketing data; data privacy is about encryption

Answer: (B)

Data privacy is about how personal data is handled—what is collected, how it’s stored, how it’s used, and who it’s shared with, all guided by consent, purpose limitation, and regulatory requirements. Information security is about protecting that data from harm or unauthorized access or disclosure—using technical and administrative controls to preserve confidentiality, integrity, and availability. In practice, privacy sets the rules for data handling, while security enforces protection of the data itself. For example, you can have a privacy policy outlining data collection and usage, and you can implement encryption and access controls to ensure that only authorized people can view the data. The other options don’t fit because they mix up the focus (privacy vs physical security or HR) or reduce privacy or security to a single aspect like encryption.

Data privacy is about how personal data is handled—what is collected, how it’s stored, how it’s used, and who it’s shared with, all guided by consent, purpose limitation, and regulatory requirements. Information security is about protecting that data from harm or unauthorized access or disclosure—using technical and administrative controls to preserve confidentiality, integrity, and availability. In practice, privacy sets the rules for data handling, while security enforces protection of the data itself. For example, you can have a privacy policy outlining data collection and usage, and you can implement encryption and access controls to ensure that only authorized people can view the data. The other options don’t fit because they mix up the focus (privacy vs physical security or HR) or reduce privacy or security to a single aspect like encryption.