Which statement best describes the difference between data security and data privacy?

• A. Security protects data from unauthorized access; privacy governs collection, use, and sharing.
• B. Privacy protects data from unauthorized access; security governs collection and sharing.
• C. They are unrelated concepts.
• D. Security is about hardware; privacy about software.

Answer: (A)

Data security and data privacy address different facets of protecting information. Data security is about protecting data from unauthorized access, loss, or corruption—this includes technical and administrative measures like encryption, strong access controls, authentication, and secure storage. Data privacy, on the other hand, concerns how data is collected, used, stored, and shared—focusing on consent, purpose limitation, data minimization, retention, and the rights of individuals over their information.

The statement that best describes their difference says security protects data from unauthorized access, while privacy governs collection, use, and sharing. This captures the practical split: security is about safeguarding the data itself, privacy is about governing how that data is handled and for what purposes.

In practice both work together: robust security reduces the risk of breaches that could expose data, while clear privacy policies define what data can be collected and how it can be used, guiding what security measures are necessary. The other options miss the mark because privacy is not primarily about access control, they aren’t unrelated concepts, and security involves more than just hardware while privacy is about governance and policy.