Data Protection & Privacy Consulting
Data Protection in simple terms will mean ensuring data is not available publicly. As a larger concept data protection refers to laws, policies, procedures and technologies ensuring data protection. It is achieved through technologies like DLP, Encryption, Tokenisation, End Point protection , Key Management Solution and Hardware Security Module.
Data protection and privacy are often used interchangeably however there is major difference between two. Data protection is about protecting actual data majorly PII (Personally Identifiable Information), PHI (Personal Health Information) and PCI (Personal Card Information) but Privacy is all about “Access Controls” ! Who , how and when data is visible and accessible is defined under privacy. Various acts and laws act as guidance to manage privacy and to achieve it organisations take necessary measures using PETs (Privacy Enhancing Technologies)