Data Privacy refers to the practices, policies, and regulations that govern how personal or sensitive data is collected, used, stored, shared, and protected. It focuses on the individual’s right to control their personal information and ensures that organizations handle data ethically and transparently. Data privacy is guided by laws such as GDPR, CCPA, HIPAA, and LGPD, which mandate principles like user consent, data minimization, purpose limitation, and access rights. It is crucial for building trust, avoiding legal penalties, and safeguarding against data misuse, breaches, and identity theft.
One person duplicates a workbook, forgets the filter, and the report renders perfectly for everyone. That is the failure mode to design against.
Labels help determine handling rules, but do not locate every person’s records or enforce policy. Classification needs owners, controls, and current context.
Understand privacy risks across collection, use, sharing, retention, and disposal.