This regulation relates to both data privacy and data security. Data privacy is the right to control how information is collected and used; focusing on the use and governance of data. Data security, on the other hand, is focused on protecting data from, for example, attacks and exploitation of stolen data.