Data Protection and Data Security
Ian Long · 2024
This chapter discusses the policy aspects of data protection and data security which are related but separate subjects. They both define the commitment of any company that processes a significant amount of computer data, or digital information, to protect the rights of their customers and employees, and the security of their data. (This is data or information, called personal data, that identifies or could identify an individual.) This commitment effectively applies to every company that does business of any kind with customers who are individuals. Data protection concerns the relationship between data, technology, privacy and the relevant legal issues, including the fundamental rights of individuals as to the obtaining, use and disclosure of their personal data. Data security seeks to enforce these rights and protect data from attack by third parties, including the actions of unauthorized users. In this chapter we consider what polices the company should consider to address both of these important subjects.