IT2028 Data Privacy Quiz

Data Privacy and Security

• Data security consists of standards and measures aimed at preventing unauthorized access to digital data and protecting against alterations, deletions, or disclosures.
• Personal data encompasses any information that can directly identify an individual, whether in physical form or not.
• Primary privacy issues include:
  • Accuracy: Responsibility of data collectors to ensure correctness of data.
  • Property: Ownership rights associated with data.
  • Access: Control over who can utilize the data.
• Data breaches involve unauthorized or unintentional dissemination of confidential information.
• Cyberattacks refer to the theft of data via electronic means, including ransomware and hacking incidents.
• Organizations implement various security technologies such as firewalls, user authentication, and internal security practices to safeguard data.

Data Privacy vs. Data Security

• Organizations may mistakenly believe that protecting data from hackers ensures compliance with data privacy regulations.
• Data privacy and security, while often confused, are distinct; security focuses on protecting data, while privacy emphasizes the protection of individual identities.
• Key differentiators include:
  • What data is protected
  • How protection measures are implemented
  • Who is responsible for the protection
• Privacy involves the responsible use of data, including considerations of individual's rights, data handling regulations, and the governance of personal data.

CIA Triad

• The CIA Triad model guides organizational policies on information security, incorporating three fundamental components:
  • Confidentiality: Ensuring data is only accessible by authorized individuals.
  • Integrity: Maintaining reliability and accuracy of information.
  • Availability: Ensuring users have reliable access to data when needed.

Information Privacy

• Information privacy is crucial for the responsible sharing of personal data, especially with the rise of digital technologies.
• Increased vulnerabilities in personal information necessitate robust privacy practices.
• Techniques such as encryption, authentication, and data masking are employed to restrict access to sensitive information, ensuring that only designated users are privy to it.