Exercise 1
What is the relationship between data security and data protectionData protection includes measures against the unlawful collection, storage, sharing, and reuse of personal data. It is based on the right of individuals to self-determination regarding the handling of their data and is anchored in the General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz), and the corresponding laws of the federal states. A violation of data protection regulations can lead to criminal consequences. Read More?
Proposed Solution
Both concepts aim to ensure data protection through specific measures.
- Data security generally seeks to secure all data.
- Data protection focuses specifically on the protection of personal dataPersonal data includes: 'any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person(…)” (EU GDPR Article 4 No. 1, 2016; BDSG §46 para. 1, 2018; BlnDSG §31, 2020). Read More.
- Data protection extends beyond mere secure storage to include protection against unauthorized use, processing, and sharing.
- The goal of data protection is to uphold the right to informational self-determination, whereas data security primarily aims to prevent data loss and unauthorized access.