Which statement best describes data privacy vs data security?

Which statement best describes data privacy vs data security?

• A. Privacy concerns how data is collected and used; security protects data from unauthorized access or alteration.
• B. Privacy relates to keeping data secret; security relates to data quality.
• C. Privacy is about encrypting data; security is about who can access it.
• D. Privacy and security mean the same thing.

Answer: (A)

Data privacy focuses on how information is collected, stored, used, and shared, including user consent and the purposes for which data is processed. Data security focuses on protecting that information from threats by keeping it confidential, accurate, and available through controls like encryption, access restrictions, authentication, and monitoring. The best statement captures this separation: privacy concerns how data is collected and used, while security protects data from unauthorized access or alteration. For example, a company may obtain consent to collect customer preferences (privacy) and then safeguard those records with encryption and restricted access (security). The other options mix up concepts—privacy is not simply secrecy, security is not primarily about data quality, and they are not the same thing.

Data privacy focuses on how information is collected, stored, used, and shared, including user consent and the purposes for which data is processed. Data security focuses on protecting that information from threats by keeping it confidential, accurate, and available through controls like encryption, access restrictions, authentication, and monitoring. The best statement captures this separation: privacy concerns how data is collected and used, while security protects data from unauthorized access or alteration. For example, a company may obtain consent to collect customer preferences (privacy) and then safeguard those records with encryption and restricted access (security). The other options mix up concepts—privacy is not simply secrecy, security is not primarily about data quality, and they are not the same thing.