What is Data Privacy

Definition

Data privacy is the discipline of ensuring that personal and sensitive data is collected, used, shared, and retained in line with individuals' rights and applicable regulations, controlling who can access data and for what purpose while honouring consent and legal obligations.

« Back to Glossary Index

Protects individuals’ rights over how their personal data is collected and used
Reduces legal and reputational risk by complying with regulations like GDPR
Builds customer trust by honouring consent and limiting data use to its purpose
Guides minimisation so only necessary personal data is collected and retained

Real World Example

An online retailer applies data-privacy controls so customers can view, export, or delete their personal data on request, and marketing systems only use information for purposes the customer explicitly consented to.

FAQs

How is data privacy different from data security?

Security protects data from unauthorised access, while privacy governs whether and how personal data may legitimately be used, regardless of security.

What regulations govern data privacy?

Laws such as GDPR, CCPA, and HIPAA set rules on consent, purpose, access, and individual rights over personal data.

What practices support data privacy?

Consent management, data minimisation, purpose limitation, anonymisation, and honouring access and deletion requests.