Which statement best describes data privacy in contrast to data security?

• A. To ensure encryption of all data at rest
• B. Ensuring access control measures
• C. Governing how data is collected, used, and shared
• D. Storing data in the cloud

Answer: (C)

Data privacy focuses on how personal data is governed: what gets collected, why it’s collected, how it’s used, who it’s shared with, and how long it’s kept. It’s about policies, consent, purpose limitation, and data handling practices. This is distinct from data security, which is about protecting data from unauthorized access or disclosure via technical and administrative controls. Encryption of data at rest and access control measures are security controls meant to shield data, not govern its use. Storing data in the cloud is simply a storage choice, not a privacy policy. So the statement that best describes data privacy is governing how data is collected, used, and shared.